fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:01 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:01 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:01 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x2c041)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f400000000150000"]})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x0, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:02 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 3:
syz_open_dev$dri(0x0, 0x0, 0x2c041)

05:28:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f400000000150000"]})

05:28:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x0, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 1:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x1, 0x5f})

05:28:02 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f400000000150000"]})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x0, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:02 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x1, 0x5f})

05:28:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x1, 0x5f})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:02 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 3:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x0, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000"]})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x0, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x5f})

05:28:02 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000"]})

05:28:02 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x1, 0x5f})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x0, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x5c)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000"]})

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x5f})

05:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x0, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}], 0x4c)

05:28:02 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x0, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x5f})

05:28:02 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x5f})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:02 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x1})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x0, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:02 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:02 executing program 4:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x0, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x0, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:02 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x1})

05:28:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f9e"]})

05:28:02 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x0, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 4:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x1})

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x0, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 4:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x200, @private1, 0xfffffffb}], 0x78)

05:28:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x0, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x0, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:03 executing program 3:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f0000000000"]})

05:28:03 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x5c)

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 3:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 3:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e21, @loopback}], 0x4c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRES16, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)

05:28:03 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})

05:28:03 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:03 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:03 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})

05:28:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:03 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:03 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})

05:28:04 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:04 executing program 3:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:04 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0]})

05:28:04 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYBLOB="00000700f4000000001500004500001f00000000002f"]})

05:28:04 executing program 3:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0]})

05:28:04 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:04 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:04 executing program 3:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:04 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:05 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0]})

05:28:05 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:05 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:05 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB]})

05:28:05 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:05 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:05 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778, 0x200})

05:28:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:05 executing program 5:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:05 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB]})

05:28:05 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:05 executing program 5:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:05 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:05 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB]})

05:28:06 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="07000000000000000000000045000014"]})

05:28:06 executing program 5:
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:06 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:06 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:06 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:06 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:06 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:06 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x3778, 0x200})

05:28:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="07000000000000000000000045000014"]})

05:28:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="07000000000000000000000045000014"]})

05:28:06 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:07 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x3778, 0x200})

05:28:07 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:07 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078"]})

05:28:07 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x3778, 0x200})

05:28:07 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:07 executing program 5:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078"]})

05:28:07 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x200})

05:28:07 executing program 5:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:07 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0)

05:28:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078"]})

05:28:07 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:08 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:08 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x200})

05:28:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffff"]})

05:28:08 executing program 5:
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0x3c)

05:28:08 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffff"]})

05:28:08 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:08 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:08 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x0, 0x200})

05:28:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffff"]})

05:28:08 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:09 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778})

05:28:09 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:09 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x0)

05:28:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e"]})

05:28:09 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778})

05:28:09 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:09 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e"]})

05:28:09 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:09 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x3778})

05:28:10 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:10 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:10 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e"]})

05:28:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e"]})

05:28:10 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40400c0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:10 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:10 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:10 executing program 0:
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x12fc, 0x15, 0x200, 0x70bd2a, 0x25dfdbfd, {0x22}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "a033b3238e81c2dcd3f4314064e33f7bf54ee82eb7227ccb4d64676fd617649fd06f70896ed3ce9a841a75252a56f8c0702492a8d461b2489a10ae208f7a5d903f86b89f5852b904a09d62609ab16bdf7d2880127b493a93e5a648cd3d68343d5a715bccc83b9e7e1a48fe4ab56e3f0a1017e5edb3432c58b2e4f4eb0968dfd0681ed53e0936cf2c2977a92ef70a11a769177fead94eba1dcb6e3bf08874"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "c70dfb5106a7d4f814d9eadab5fd0d8680ae6bfab871326b6ae72e9f8cfda0ce476d71872ac95bdb4ca575d9af60ffa61585cd29f4187e5665680cf93ad802047f"}, @INET_DIAG_REQ_BYTECODE={0x11, 0x1, "b2707637b055cbf79d6909ea2a"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "1a4bc500892b898804b34cc048678f2ce3eddef68b735e896c9b334662d4c0ca65b7827c0df1ae20adc94d1ca7698649e687bb56da772b29ee4e173222fba889299cd51875caa6371ca496e7859ce02c85711680c5975a7bbc40bdc7dcbe7f155b2897f05e50a9c8b5194e1b57b6b51e35eef7177b2ccfb2cc3c64e5ab6f16cad83077fe630c0ee024572945cee800c26dd294bfe775a25c21d11e183a3756fe609e5559b546905233065d5f2563323235eb2fb5dfe70aa849b13ece95cec257e09e9932412d60d1ea0453e798adf0957279cc00f98e907c"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "1fbb6984073e61dd46884024d5cb488c389cd59127e6b34f0780584fb6328be63fd0daab0aaa838599ca401a74377b7e116add0d443fc2a2764d08aff15a71aca4e80ab32c7117d471da3051eb42cf291ecc86b2c306318673766531f50bedbd3e606bd9cdb7ecf71dd36ccb931bb99ab9c98331c6c54c509205f5f6939a4b321b62ca25a5c9a453191c578f34ee0841a2be9151777f1e15722594037db58a"}, @INET_DIAG_REQ_BYTECODE={0x62, 0x1, "68a1ea009e4c5056d90bd5c50f8b485509a6386ec129bf68d7655d625e53ac584c5e3fc85c61c16e8079d4e8c1deddc7d56b318fcae518ada52c62cc66708f5d8b82a822a82763f93c194b3d0262f0b67e20f4708d299ce847d3a116d065"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x12fc}, 0x1, 0x0, 0x0, 0x84}, 0x4010)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$FUSE_CREATE_OPEN(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x40}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xf7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xfcdf}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8045}, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000040))

05:28:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e00"]})

05:28:10 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:10 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:11 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e"]})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e00"]})

05:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:11 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700b85528000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5230e10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x801)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000))

05:28:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}], 0x1c)

05:28:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e00"]})

05:28:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x0, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:11 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x0, @loopback}], 0x2c)

05:28:11 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x157e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})

05:28:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x157e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x157e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3f}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfff}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})

05:28:11 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x7, 0x1, 0x5, 0x7fff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)

05:28:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x0, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x100, 0x2)
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={0x0, 0xc})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffe1, 0x400)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xffffffff, 0xffffffff, 0x3, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r4})
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})

05:28:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10)

05:28:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x0, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x0, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 1:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x0, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:11 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x16)
r3 = socket(0x2b, 0x1, 0x0)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000780)={0xa, &(0x7f0000000180)=[{}, {@fixed}, {@none}, {}, {}, {@none}, {@fixed}, {@none}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syz7r^\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000fffffffc000000004500001400000000002f9078ffffffff7f000001"]})

05:28:11 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:11 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x16)
r3 = socket(0x2b, 0x1, 0x0)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000780)={0xa, &(0x7f0000000180)=[{}, {@fixed}, {@none}, {}, {}, {@none}, {@fixed}, {@none}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syz7r^\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000fffffffc000000004500001400000000002f9078ffffffff7f000001"]})

05:28:11 executing program 0:
r0 = msgget(0x0, 0x600)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="74756e6c30000000f5c73091b70053f2", @ANYRES32=r0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac1414aae1416ca0eea692274705e58c2270f454e079509c5b27cadfcf10"]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000080)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x90, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0x4040000)

05:28:11 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x100, {0xfffffffe, 0x8, 0x4, 0x30f0, 0x3f, 0x8}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})

05:28:11 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0xc0)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff)
socketpair(0x18, 0x5, 0x6, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe4, 0x13, 0x1, 0x70bd29, 0x25dfdbff, {0x2c, 0xc0, 0x1, 0x3, {0x4e20, 0x4e20, [0x61, 0x3, 0x40, 0xb30], [0x8, 0x8001, 0x2, 0x6], 0x0, [0x6]}, 0x71, 0x1f}, [@INET_DIAG_REQ_BYTECODE={0x96, 0x1, "7bd2cf1b6492ceea676ed930f9e8da2da8d0c4da546da03db32f045e718c2487348984e9ad546357665e51012be29f8a7022676938b72c8f762b9928a331d0deae6458643f1a0ee11082a8d38a1f3e16e6139d360bf2c7ced5df400606d46276559fd1a388088e771dc6906ab3cf64763b4b5dcd67b299023fc67c7cc63939b8776c3620b6617aaaefd6f6dce5ce432c171e"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4001)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="454e640e1ee0a692b356dbe9c2af2163d364790787a1ccd034e22ba2b3bfd96c9ce3e3d4ba76945e19dc95b42a3a74820e414002037de72da97d9019ec9f214cf412be6cdfe2017c44363b0655c96dcec657510259abee05622944124164156a57a1dffe08f4a83bdb46", @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf250100000008000a0002000000050004008000000006001b004e200000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4041)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000fdfade8000004060fa558f2f02134fa000002f9078ffffffff938851f5b3f700"/52]})
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x34, 0x0, 0xa00, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x50810}, 0x4010)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000200))
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000))

05:28:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)

05:28:12 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x800)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x16)
r3 = socket(0x2b, 0x1, 0x0)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000780)={0xa, &(0x7f0000000180)=[{}, {@fixed}, {@none}, {}, {}, {@none}, {@fixed}, {@none}, {@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syz7r^\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000fffffffc000000004500001400000000002f9078ffffffff7f000001"]})

05:28:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000680)="f71f4013cf442ae380768596c57a17a3d8105d32c2bac662d887cec8c73d0e3bf62e5273168d817585066286ac8b7569bfc8e00746f4b96c61fc3c03effbc198fe4a50c87a4c4e4db4db11fef9db94dba8f25d723fd04e2330264722788bf2924902fba2b5b7e7112b1d6911a584cc2be2215af19a9937f42842196d859e2de93af04d4d22222ff2ce7f320068cce8cf92c457ee478ec36f8dab65bf6246b04dd671f38b1f3fe99155952a799194cdc3a709f0d630ba081d90eb6a9f2ad43252d67609569cba5046588c1ed399ac0abdd459efb5938dbcad40586a51a662f6f37e4a705942c1ab1ccb03ee9fc072b860fb778f450cb59da54c46a605a48d93ac08f99a25e6d5a2522828b37507150fc92bb04a5ab84cf1212e0473306daa9d44e05d99b9795722097b83d974e26a9ff26c2507d107dfa529532b24beec52c21aae24edd61da76f18a57243da348888741aced70c35414e15e36d0a0b0b1864b83c0728ce67a7d6dc7a66ceb79e9f5428ddb449c39b13b8bc327594d481da6dd0db77471048da382d952249809aba5428971291e6d4dcfd37a52ec6f75c63c4c2a217962e0a25de661b49dfa0465617394add5a38e88aa312a1bd102742302e395382ea41a6889271d9e53eaeab02ab8b06d1e1bd20acf78f2e3dd4a1eb70e0b04f918060e981dd96b10c2060f95dcccabce56016eb2f880d0a317dbf153c8aadb2b05aea6e3b41636437d8535a0ca31dadaa5e6dac553f3911205b3c4bf754261652279282e35dc89173754c91aa08f3bf66fc647b57f4e3d4ecc9a4db6ad08df0957002dcb2a59096fefeed54fe405b33f61c63f8244dc818e6bdaa78f0cd8beae8773b1a02df2e7a98a50dca1e86522b78f1b5ef9e1f5a7adcb8685ea6da70f5293f35b5", 0x285})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0xfff, 0x3, 0x4})

05:28:12 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:12 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x800, 0x6, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r3})

05:28:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0x1})

05:28:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000680)="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", 0x285})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0xfff, 0x3, 0x4})

05:28:12 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x800, 0x6, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r3})

05:28:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0x1})

05:28:12 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0x1})

05:28:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:12 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x8, 0x1})

05:28:12 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000680)="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", 0x285})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0xfff, 0x3, 0x4})

05:28:13 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x4e23, @loopback}], 0x2c)

05:28:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:13 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x800, 0x6, 0x20, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r3})

05:28:13 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000680)="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", 0x285})

05:28:13 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})

05:28:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:13 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:13 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})

05:28:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:13 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:13 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)

05:28:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})

05:28:14 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', r4, 0x700, 0x80, 0x0, 0x5, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0xcefb1b651415f7a8, 0x8, "63608c9b04f3"}]}, @timestamp_addr={0x44, 0x44, 0xf1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x93f}, {@remote}, {@remote, 0x20}]}, @rr={0x7, 0x17, 0x28, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @loopback, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x40, 0x5, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x9e, [@empty, @empty, @broadcast]}, @end, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x4, [{@broadcast, 0x8}, {@private=0xa010101, 0x7}, {@remote, 0x1}]}]}}}}})

05:28:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x208dc1)

05:28:14 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x7, 0x40, 0x9, 0x9, {{0x9, 0x4, 0x2, 0x36, 0x24, 0x68, 0x0, 0x3f, 0x29, 0x0, @multicast1, @multicast2, {[@noop, @noop, @generic={0x86, 0xc, "c0901ff1ee29beca3604"}, @noop]}}}}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3f}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='tufl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x8, 0x8000, 0x7fff, 0x7f, {{0x18, 0x4, 0x3, 0x7, 0x60, 0x67, 0x0, 0x27, 0x4, 0x0, @local, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x27, 0x3, 0x3, [{@rand_addr=0x64010102, 0x3}, {@broadcast, 0x9}, {@loopback, 0x6}, {@private=0xa010100, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@broadcast, 0x9}, {@empty, 0x8}, {@remote, 0xff}, {@rand_addr=0x64010102, 0xfffffffb}]}]}}}}})

05:28:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8})

05:28:14 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))

05:28:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:14 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:14 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', r4, 0x700, 0x80, 0x0, 0x5, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0xcefb1b651415f7a8, 0x8, "63608c9b04f3"}]}, @timestamp_addr={0x44, 0x44, 0xf1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x93f}, {@remote}, {@remote, 0x20}]}, @rr={0x7, 0x17, 0x28, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @loopback, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x40, 0x5, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x9e, [@empty, @empty, @broadcast]}, @end, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x4, [{@broadcast, 0x8}, {@private=0xa010101, 0x7}, {@remote, 0x1}]}]}}}}})

05:28:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8})

05:28:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
socketpair(0x15, 0xa, 0x7, 0x0)

05:28:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:14 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', r4, 0x700, 0x80, 0x0, 0x5, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0xcefb1b651415f7a8, 0x8, "63608c9b04f3"}]}, @timestamp_addr={0x44, 0x44, 0xf1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x93f}, {@remote}, {@remote, 0x20}]}, @rr={0x7, 0x17, 0x28, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @loopback, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x40, 0x5, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @local, {[@ssrr={0x89, 0xf, 0x9e, [@empty, @empty, @broadcast]}, @end, @timestamp_addr={0x44, 0x1c, 0x2a, 0x1, 0x4, [{@broadcast, 0x8}, {@private=0xa010101, 0x7}, {@remote, 0x1}]}]}}}}})

05:28:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8})

05:28:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})

05:28:14 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r0=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:14 executing program 4:
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080))
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:14 executing program 5:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4080)
socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @local}}}})
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x42100)
r3 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
r5 = getpgid(0xffffffffffffffff)
shmctl$IPC_SET(r3, 0x1, &(0x7f0000000040)={{0x2, r4, 0x0, 0xee00, 0x0, 0x8, 0x1}, 0xffffffd3, 0x6, 0x7, 0x7, 0x0, r5, 0xc4})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4)
shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000140)=""/126)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xef9, 0x4, 0x3, 0x9, 0x5, r5})

05:28:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:14 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x90040)
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x2, 0x9, 0xa14, 0x8, 0x7, 0x2})

05:28:14 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:14 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', r4, 0x700, 0x80, 0x0, 0x5, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0xcefb1b651415f7a8, 0x8, "63608c9b04f3"}]}, @timestamp_addr={0x44, 0x44, 0xf1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x93f}, {@remote}, {@remote, 0x20}]}, @rr={0x7, 0x17, 0x28, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @loopback, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @noop]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})

05:28:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 0:
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1ff, 0xb777, 0x4000000c})

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gre0\x00', r4, 0x700, 0x80, 0x0, 0x5, {{0x24, 0x4, 0x0, 0x3, 0x90, 0x68, 0x0, 0x9, 0x2f, 0x0, @local, @private=0xa010100, {[@noop, @rr={0x7, 0xb, 0x77, [@rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0xcefb1b651415f7a8, 0x8, "63608c9b04f3"}]}, @timestamp_addr={0x44, 0x44, 0xf1, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0x6}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x93f}, {@remote}, {@remote, 0x20}]}, @rr={0x7, 0x17, 0x28, [@dev={0xac, 0x14, 0x14, 0x1d}, @local, @loopback, @rand_addr=0x64010101, @empty]}, @ra={0x94, 0x4}, @noop]}}}}})

05:28:15 executing program 0:
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x5, 0x8000)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x4], 0x2, 0x1ff, 0x93, 0xfffffffa, 0x7, 0x7fffffff, 0x6, {0x3, 0x800, 0x0, 0x7ff, 0x123d, 0x5, 0xf001, 0x101, 0xf5b0, 0x8001, 0x1, 0x3, 0x9, 0x3, "340e90ba8611b2ef68745a9c834bf87bcd869a2eaf2af10ccc4b22e4ede1149a"}})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000040)={0x1, 0x0, 0x1000})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 0:
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x80000000008001, 0x6c02)
syz_open_dev$dri(&(0x7f0000000000), 0x23, 0x408200)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000200)={0x1, 0x4, 0x8, 0x400, 0x0, 0x0, 0x9})
r2 = semget$private(0x0, 0x2, 0x544)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/160)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430)

05:28:15 executing program 4:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)

05:28:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 4:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 4:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 0:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff9, 0x0, 0x1})
openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0xb778, 0x4000000c})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x7f, 0x8, 0x0, 0x5, 0x12})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)

05:28:15 executing program 4:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:15 executing program 5 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1820.358912] FAULT_INJECTION: forcing a failure.
[ 1820.358912] name failslab, interval 1, probability 0, space 0, times 0
05:28:15 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

[ 1820.422806] CPU: 1 PID: 31205 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1820.430729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1820.440111] Call Trace:
[ 1820.442715]  dump_stack+0x1b2/0x281
[ 1820.446380]  should_fail.cold+0x10a/0x149
[ 1820.450580]  should_failslab+0xd6/0x130
[ 1820.454576]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1820.459263]  __vgem_gem_create+0x44/0xe0
[ 1820.463340]  vgem_gem_dumb_create+0xc5/0x210
[ 1820.467762]  drm_mode_create_dumb_ioctl+0x221/0x2b0
05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1820.472793]  ? __drm_printfn_debug+0x70/0x70
[ 1820.477210]  drm_ioctl_kernel+0x14c/0x200
[ 1820.481375]  drm_ioctl+0x419/0x870
[ 1820.484931]  ? __drm_printfn_debug+0x70/0x70
[ 1820.490658]  ? drm_getstats+0x20/0x20
[ 1820.494475]  ? fsnotify+0x974/0x11b0
[ 1820.498216]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1820.503171]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1820.508195]  ? SyS_write+0x1b7/0x210
[ 1820.511924]  ? drm_getstats+0x20/0x20
[ 1820.515733]  do_vfs_ioctl+0x75a/0xff0
05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, 0x0)

[ 1820.519629]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1820.524038]  ? lock_downgrade+0x740/0x740
[ 1820.528190]  ? __fget+0x225/0x360
[ 1820.531653]  ? do_vfs_ioctl+0xff0/0xff0
[ 1820.535632]  ? security_file_ioctl+0x83/0xb0
[ 1820.540047]  SyS_ioctl+0x7f/0xb0
[ 1820.543410]  ? do_vfs_ioctl+0xff0/0xff0
[ 1820.547388]  do_syscall_64+0x1d5/0x640
[ 1820.551425]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1820.556635] RIP: 0033:0x466459
[ 1820.559841] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 5 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:15 executing program 4:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r1})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1820.567555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1820.574829] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1820.582188] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1820.589457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1820.596735] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
05:28:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, 0x0)

05:28:15 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 4:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000440)=@other={'unlock', ' ', 'mem'}, 0xb)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r2})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000400)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045115f824ea7341400001400000000002f9078ffffffffac1414aa"]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:15 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:15 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, 0x0)

[ 1820.689277] FAULT_INJECTION: forcing a failure.
[ 1820.689277] name failslab, interval 1, probability 0, space 0, times 0
[ 1820.751219] CPU: 0 PID: 31282 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1820.759140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1820.768531] Call Trace:
[ 1820.771132]  dump_stack+0x1b2/0x281
[ 1820.774771]  should_fail.cold+0x10a/0x149
[ 1820.778924]  should_failslab+0xd6/0x130
[ 1820.782906]  kmem_cache_alloc+0x28e/0x3c0
[ 1820.787059]  __d_alloc+0x2a/0xa20
[ 1820.790525]  __shmem_file_setup.part.0+0xcb/0x3c0
[ 1820.795373]  ? fs_reclaim_release+0xd0/0x110
05:28:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c00000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:16 executing program 2 (fault-call:7 fault-nth:0):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

[ 1820.799783]  ? shmem_create+0x30/0x30
[ 1820.803590]  ? __vgem_gem_create+0x44/0xe0
[ 1820.807844]  shmem_file_setup+0x4b/0x60
[ 1820.811825]  drm_gem_object_init+0x36/0xa0
[ 1820.816581]  __vgem_gem_create+0x6a/0xe0
[ 1820.820641]  vgem_gem_dumb_create+0xc5/0x210
[ 1820.825058]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1820.830080]  ? __drm_printfn_debug+0x70/0x70
[ 1820.834491]  drm_ioctl_kernel+0x14c/0x200
[ 1820.838648]  drm_ioctl+0x419/0x870
[ 1820.842211]  ? __drm_printfn_debug+0x70/0x70
[ 1820.846630]  ? drm_getstats+0x20/0x20
[ 1820.850442]  ? fsnotify+0x974/0x11b0
[ 1820.854157]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1820.859089]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1820.864103]  ? SyS_write+0x1b7/0x210
[ 1820.867823]  ? drm_getstats+0x20/0x20
[ 1820.871630]  do_vfs_ioctl+0x75a/0xff0
[ 1820.875442]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1820.879855]  ? lock_downgrade+0x740/0x740
[ 1820.884009]  ? __fget+0x225/0x360
[ 1820.887464]  ? do_vfs_ioctl+0xff0/0xff0
[ 1820.891439]  ? security_file_ioctl+0x83/0xb0
[ 1820.895894]  SyS_ioctl+0x7f/0xb0
[ 1820.899250]  ? do_vfs_ioctl+0xff0/0xff0
[ 1820.903211]  do_syscall_64+0x1d5/0x640
[ 1820.907085]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1820.912258] RIP: 0033:0x466459
[ 1820.915427] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1820.923235] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1820.930485] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1820.937735] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1820.944997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
05:28:16 executing program 5 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:16 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:16 executing program 4 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

[ 1820.952261] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
05:28:16 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:16 executing program 0 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

[ 1821.021231] FAULT_INJECTION: forcing a failure.
[ 1821.021231] name failslab, interval 1, probability 0, space 0, times 0
[ 1821.049212] CPU: 0 PID: 31327 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1821.057137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1821.066498] Call Trace:
05:28:16 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/73)

05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1821.069090]  dump_stack+0x1b2/0x281
[ 1821.072720]  should_fail.cold+0x10a/0x149
[ 1821.076871]  should_failslab+0xd6/0x130
[ 1821.080850]  kmem_cache_alloc+0x28e/0x3c0
[ 1821.085000]  ? shmem_destroy_callback+0xa0/0xa0
[ 1821.089673]  shmem_alloc_inode+0x18/0x40
[ 1821.093735]  ? shmem_destroy_callback+0xa0/0xa0
[ 1821.098413]  alloc_inode+0x5d/0x170
[ 1821.102044]  new_inode+0x1d/0xf0
[ 1821.105410]  shmem_get_inode+0x8b/0x890
[ 1821.109390]  __shmem_file_setup.part.0+0x104/0x3c0
[ 1821.114319]  ? fs_reclaim_release+0xd0/0x110
05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1821.118731]  ? shmem_create+0x30/0x30
[ 1821.122546]  ? __vgem_gem_create+0x44/0xe0
[ 1821.126800]  shmem_file_setup+0x4b/0x60
[ 1821.130793]  drm_gem_object_init+0x36/0xa0
[ 1821.137052]  __vgem_gem_create+0x6a/0xe0
[ 1821.141135]  vgem_gem_dumb_create+0xc5/0x210
[ 1821.145859]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1821.151498]  ? __drm_printfn_debug+0x70/0x70
[ 1821.156104]  drm_ioctl_kernel+0x14c/0x200
[ 1821.160346]  drm_ioctl+0x419/0x870
[ 1821.163904]  ? __drm_printfn_debug+0x70/0x70
05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1821.168531]  ? drm_getstats+0x20/0x20
[ 1821.173136]  ? fsnotify+0x974/0x11b0
[ 1821.177046]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1821.182673]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1821.188426]  ? SyS_write+0x1b7/0x210
[ 1821.192442]  ? drm_getstats+0x20/0x20
[ 1821.196636]  do_vfs_ioctl+0x75a/0xff0
[ 1821.200540]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1821.205057]  ? lock_downgrade+0x740/0x740
[ 1821.209578]  ? __fget+0x225/0x360
[ 1821.214494]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.218833]  ? security_file_ioctl+0x83/0xb0
[ 1821.224645]  SyS_ioctl+0x7f/0xb0
[ 1821.228040]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.232419]  do_syscall_64+0x1d5/0x640
[ 1821.236933]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1821.242934] RIP: 0033:0x466459
[ 1821.246217] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1821.254016] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1821.261958] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1821.269220] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1821.276485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1821.284125] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
05:28:16 executing program 5 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:16 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:16 executing program 0:
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000000)=[0x7fff, 0x1, 0x8000, 0x7], &(0x7f0000000140)=[0x1f, 0x6, 0x32], &(0x7f0000000080)=[0x2, 0x3, 0xc5b], &(0x7f00000000c0)=[0x401], 0x0, 0x6})
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10}, 0x14}}, 0x240088c0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, &(0x7f0000000380)={<r4=>0x0, <r5=>0x0})
semtimedop(0xffffffffffffffff, &(0x7f0000000340)=[{0x1, 0x7, 0x2000}, {0x1, 0x7, 0x800}, {0x0, 0x3, 0x800}, {0x1, 0x4, 0x1800}, {0x4, 0x8001}, {0x0, 0x40, 0x1000}, {0x1, 0x1, 0x1000}, {0x3, 0x8, 0x1000}], 0x8, &(0x7f00000003c0)={r4, r5+10000000})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:16 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:16 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="04b493fbbdae7450da99eed2b2e604fa5ddf9e417319c043cadf239a91da7bb6b585dd16653e373641d21a0fbd08b179e3028af33ae8ad06d5b4f1a4b9497c7102fe23559b23af8326967bf3450a8e989390c810e3a98f3ea48938cbb66e84e2a49574da16eb4d32be9fcea7e77803ff3c6969131eeb86df28cc4984ea5ef884182b8f74a06963c89a2d6434117cec9af36ebc72c577", 0x96})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x3, 0x0, 0x10001})

05:28:16 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:16 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:16 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
shmctl$SHM_UNLOCK(0x0, 0xc)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))

[ 1821.405990] FAULT_INJECTION: forcing a failure.
[ 1821.405990] name failslab, interval 1, probability 0, space 0, times 0
05:28:16 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000140)=""/170)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1000, 0x0, 0xfba6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4})

05:28:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
socketpair(0xa, 0x80c, 0x6000, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x103}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:16 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1821.501480] CPU: 0 PID: 31370 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1821.509858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1821.519672] Call Trace:
[ 1821.522269]  dump_stack+0x1b2/0x281
[ 1821.526085]  should_fail.cold+0x10a/0x149
[ 1821.530380]  should_failslab+0xd6/0x130
[ 1821.534962]  kmem_cache_alloc+0x28e/0x3c0
[ 1821.539620]  get_empty_filp+0x86/0x3e0
[ 1821.543754]  alloc_file+0x23/0x440
[ 1821.547515]  __shmem_file_setup.part.0+0x198/0x3c0
[ 1821.552455]  ? fs_reclaim_release+0xd0/0x110
[ 1821.556880]  ? shmem_create+0x30/0x30
[ 1821.561153]  ? __vgem_gem_create+0x44/0xe0
[ 1821.565483]  shmem_file_setup+0x4b/0x60
[ 1821.569465]  drm_gem_object_init+0x36/0xa0
[ 1821.573708]  __vgem_gem_create+0x6a/0xe0
[ 1821.577774]  vgem_gem_dumb_create+0xc5/0x210
[ 1821.582194]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1821.587219]  ? __drm_printfn_debug+0x70/0x70
[ 1821.591636]  drm_ioctl_kernel+0x14c/0x200
[ 1821.595791]  drm_ioctl+0x419/0x870
[ 1821.599337]  ? __drm_printfn_debug+0x70/0x70
[ 1821.603752]  ? drm_getstats+0x20/0x20
[ 1821.607563]  ? fsnotify+0x974/0x11b0
[ 1821.611280]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1821.616219]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1821.621241]  ? SyS_write+0x1b7/0x210
[ 1821.624957]  ? drm_getstats+0x20/0x20
[ 1821.628756]  do_vfs_ioctl+0x75a/0xff0
[ 1821.632558]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1821.636962]  ? lock_downgrade+0x740/0x740
[ 1821.641094]  ? __fget+0x225/0x360
[ 1821.644573]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.648537]  ? security_file_ioctl+0x83/0xb0
[ 1821.652933]  SyS_ioctl+0x7f/0xb0
[ 1821.656282]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.660239]  do_syscall_64+0x1d5/0x640
[ 1821.664215]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1821.669387] RIP: 0033:0x466459
[ 1821.672558] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1821.680267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1821.687519] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1821.694771] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
05:28:16 executing program 5 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:16 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:16 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000daf042"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r4, 0x804, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8800}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x8081)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:16 executing program 0:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x7, 0x20, 0x80000000, 0x8, {{0xe, 0x4, 0x0, 0x9, 0x38, 0x66, 0x0, 0x3f, 0x29, 0x0, @private=0xa010102, @empty, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x20, 0x2, [{0x1, 0x9, "f311ffc2538d1e"}, {0x5, 0x7, "1c5b18b7c4"}, {0x1, 0xa, "7987cf3b00515442"}]}]}}}}})
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x3, 0x2000000, 0x0, 0x200, 0x10000000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xd37b, 0xc0c0c0c0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:16 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:16 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="7be643f15201c381437beb569869d1ec531ad67b79deb36aefc2268884b82619fc40c091e8b1312fd3f7dda27e7fd47afc96bc70e0737ba6d67d6b8ac9e53f11cde766fa3e24511a4914f744ffde883818385ea8facdafc75a4bca3c12842579888666af1e709309cf1ee2d8572c2d6151a552ce026b10503f56f8fa6a7755fdcc75689f69c5fb8a68bc961773bf2f13fb436a512f2db68f1c9c8b82307e354d1295ffb287f7ace70a791eac45d33aa22a40274c8d92b7d7bbd3c08a784c5c73eeb25611ff7d", 0xc6, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x0, 0x2, 0x80, 0x5, &(0x7f00000001c0)=[{0x3, 0x401, 0xff15}, {0xfff, 0x1, 0x5, 0x800}, {0x3, 0x4, 0x8, 0x5}, {0x6, 0xfffb, 0x5}, {0x7, 0x476, 0x3, 0x4}]})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000180)={r1})

[ 1821.702022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1821.709287] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
[ 1821.787662] FAULT_INJECTION: forcing a failure.
[ 1821.787662] name failslab, interval 1, probability 0, space 0, times 0
[ 1821.800642] CPU: 1 PID: 31413 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1821.808534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1821.818375] Call Trace:
[ 1821.820969]  dump_stack+0x1b2/0x281
[ 1821.824604]  should_fail.cold+0x10a/0x149
[ 1821.828788]  should_failslab+0xd6/0x130
[ 1821.832765]  kmem_cache_alloc_trace+0x29a/0x3d0
05:28:17 executing program 3:
r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
write$khugepaged_scan(r0, &(0x7f0000000380), 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:17 executing program 3:
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

[ 1821.837440]  apparmor_file_alloc_security+0x129/0x800
[ 1821.842671]  security_file_alloc+0x66/0xa0
[ 1821.847529]  ? selinux_is_enabled+0x5/0x50
[ 1821.851763]  get_empty_filp+0x15c/0x3e0
[ 1821.855736]  alloc_file+0x23/0x440
[ 1821.859309]  __shmem_file_setup.part.0+0x198/0x3c0
[ 1821.864273]  ? shmem_create+0x30/0x30
[ 1821.868074]  ? do_raw_spin_unlock+0x164/0x220
[ 1821.872569]  ? __vgem_gem_create+0x44/0xe0
[ 1821.876808]  shmem_file_setup+0x4b/0x60
[ 1821.880789]  drm_gem_object_init+0x36/0xa0
05:28:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:17 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

[ 1821.885029]  __vgem_gem_create+0x6a/0xe0
[ 1821.889099]  vgem_gem_dumb_create+0xc5/0x210
[ 1821.893514]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1821.898792]  ? __drm_printfn_debug+0x70/0x70
[ 1821.903200]  drm_ioctl_kernel+0x14c/0x200
[ 1821.910248]  drm_ioctl+0x419/0x870
[ 1821.913794]  ? __drm_printfn_debug+0x70/0x70
[ 1821.918205]  ? drm_getstats+0x20/0x20
[ 1821.922011]  ? fsnotify+0x974/0x11b0
[ 1821.925732]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1821.930665]  ? debug_check_no_obj_freed+0x2c0/0x680
05:28:17 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

05:28:17 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x80000)

[ 1821.935689]  ? SyS_write+0x1b7/0x210
[ 1821.939405]  ? drm_getstats+0x20/0x20
[ 1821.943205]  do_vfs_ioctl+0x75a/0xff0
[ 1821.947020]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1821.951432]  ? lock_downgrade+0x740/0x740
[ 1821.955724]  ? __fget+0x225/0x360
[ 1821.959182]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.963199]  ? security_file_ioctl+0x83/0xb0
[ 1821.967631]  SyS_ioctl+0x7f/0xb0
[ 1821.970994]  ? do_vfs_ioctl+0xff0/0xff0
[ 1821.974971]  do_syscall_64+0x1d5/0x640
[ 1821.978867]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1821.984060] RIP: 0033:0x466459
05:28:17 executing program 5 (fault-call:1 fault-nth:5):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r0, 0x0, &(0x7f0000000180), 0x80000)

05:28:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x94)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0e0525bde8f2b558627533a049c246c7870286db3c09e87fab31e6000008720300240000002cee1252c24b5300086be1434b40204d932d8268e20761ac79154ca9d0426645712ddb5b5fd7ba089caa4116395c9101da85125b463120843bde511d12af144319e134df8efc86654106bc5cb151ea188414f98ad7ff277de6969fd373e6d12b4f383f68c464a9b52cf165b365e5950bd4443a0f6681319fe1d38b39aed7642ec8cc2d252dcf8a2fde921caf3a5dc81070203d34a7fed8c08978893f32b2fe377a9ade9e26062945b3e9ed87b9dd93b1159c21e19a82aec792910950cd06e47c397aa1e08109dfce8fdb9fed47531c214183b1896c589e2bae172bbbb4b4658ce149b96f7924d294832f511b126baa9300000000020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:17 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x28080)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x400, 0x800, 0x613, 0x3, 0x10000], 0x6, 0x7ff, 0x8, 0x7, 0x0, 0x3267, 0x5, {0x5, 0x9e05, 0x8, 0x81, 0x0, 0x0, 0x6, 0x91, 0xfff, 0x3, 0xb16, 0x7542, 0x8, 0x2, "38ce0d91e1b4db4bbfb70c5ccaecb04b687120dcd2dd081ca5675bac712d9524"}})

05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x101c02)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

[ 1821.987267] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1821.994979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1822.002246] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1822.009506] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1822.016799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1822.024050] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
[ 1822.122204] FAULT_INJECTION: forcing a failure.
[ 1822.122204] name failslab, interval 1, probability 0, space 0, times 0
[ 1822.133793] CPU: 0 PID: 31458 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1822.141689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1822.151048] Call Trace:
[ 1822.153645]  dump_stack+0x1b2/0x281
[ 1822.157287]  should_fail.cold+0x10a/0x149
[ 1822.161446]  should_failslab+0xd6/0x130
[ 1822.165434]  kmem_cache_alloc+0x40/0x3c0
05:28:17 executing program 4:
getpgid(0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))

05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x307e40)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
getitimer(0x1, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x5, 0x34, 0x1, 0x8, 0x4, 0x2, 0x14000000], &(0x7f0000000180)=[0x0, 0x0], 0x7, 0x5, 0xdededede})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x6, 0x5, 0x80})

[ 1822.169505]  radix_tree_node_alloc.constprop.0+0x1b0/0x2f0
[ 1822.175140]  idr_get_free_cmn+0x595/0x8d0
[ 1822.179305]  idr_alloc_cmn+0xe8/0x1e0
[ 1822.183109]  ? __fprop_inc_percpu_max+0x1d0/0x1d0
[ 1822.187964]  ? drm_gem_handle_create_tail+0x118/0x330
[ 1822.193202]  ? __radix_tree_preload+0x1c3/0x250
[ 1822.198824]  drm_gem_handle_create_tail+0x13e/0x330
[ 1822.204404]  ? drm_gem_destroy+0xa0/0xa0
[ 1822.208477]  vgem_gem_dumb_create+0xe7/0x210
[ 1822.212996]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1822.218051]  ? __drm_printfn_debug+0x70/0x70
05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0xe82, 0x44000)
ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0xffffffc1]})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:17 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x440)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

[ 1822.222644]  drm_ioctl_kernel+0x14c/0x200
[ 1822.227961]  drm_ioctl+0x419/0x870
[ 1822.231510]  ? __drm_printfn_debug+0x70/0x70
[ 1822.236551]  ? drm_getstats+0x20/0x20
[ 1822.240363]  ? fsnotify+0x974/0x11b0
[ 1822.244092]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1822.249293]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1822.254431]  ? SyS_write+0x1b7/0x210
[ 1822.258331]  ? drm_getstats+0x20/0x20
[ 1822.262312]  do_vfs_ioctl+0x75a/0xff0
[ 1822.266998]  ? ioctl_preallocate+0x1a0/0x1a0
05:28:17 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1f, 0x240c40)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

[ 1822.271504]  ? lock_downgrade+0x740/0x740
[ 1822.275739]  ? __fget+0x225/0x360
[ 1822.279196]  ? do_vfs_ioctl+0xff0/0xff0
[ 1822.283169]  ? security_file_ioctl+0x83/0xb0
[ 1822.287693]  SyS_ioctl+0x7f/0xb0
[ 1822.291319]  ? do_vfs_ioctl+0xff0/0xff0
[ 1822.295303]  do_syscall_64+0x1d5/0x640
[ 1822.299236]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1822.305382] RIP: 0033:0x466459
[ 1822.308578] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
05:28:17 executing program 5 (fault-call:1 fault-nth:6):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x8, 0x105100)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000000)={0x1})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x2, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x4000007f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r2})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000000c0)="2b92a6d20b2617476c502a29ad947a1686bce1117235eb0e3f436357ec7e94d9b30ffaa517d336bf7588a55659b8a252df53651e3b4c37ba090ae5b5099b2f52b4", 0x41})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r0, 0x0, 0x0, 0x80000)

05:28:17 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000000)={0x7ff, 0x7, 0x3f, 0x4, 0x10, 0x4})

05:28:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c19e6ff", @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

[ 1822.316810] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1822.324525] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1822.331831] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1822.339103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1822.346379] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
[ 1822.441300] FAULT_INJECTION: forcing a failure.
[ 1822.441300] name failslab, interval 1, probability 0, space 0, times 0
[ 1822.455739] CPU: 1 PID: 31500 Comm: syz-executor.5 Not tainted 4.14.231-syzkaller #0
[ 1822.464627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1822.473988] Call Trace:
[ 1822.476578]  dump_stack+0x1b2/0x281
[ 1822.480211]  should_fail.cold+0x10a/0x149
[ 1822.484364]  should_failslab+0xd6/0x130
[ 1822.488342]  kmem_cache_alloc_trace+0x29a/0x3d0
[ 1822.493014]  drm_vma_node_allow+0x4e/0x2e0
[ 1822.497249]  drm_gem_handle_create_tail+0x1a1/0x330
[ 1822.502354]  ? drm_gem_destroy+0xa0/0xa0
[ 1822.506433]  vgem_gem_dumb_create+0xe7/0x210
[ 1822.510841]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1822.515859]  ? __drm_printfn_debug+0x70/0x70
[ 1822.520270]  drm_ioctl_kernel+0x14c/0x200
[ 1822.524435]  drm_ioctl+0x419/0x870
[ 1822.527984]  ? __drm_printfn_debug+0x70/0x70
[ 1822.532390]  ? drm_getstats+0x20/0x20
[ 1822.536195]  ? fsnotify+0x974/0x11b0
[ 1822.539909]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[ 1822.544929]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1822.549952]  ? SyS_write+0x1b7/0x210
[ 1822.553788]  ? drm_getstats+0x20/0x20
[ 1822.557589]  do_vfs_ioctl+0x75a/0xff0
[ 1822.561392]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1822.565799]  ? lock_downgrade+0x740/0x740
[ 1822.569950]  ? __fget+0x225/0x360
[ 1822.573406]  ? do_vfs_ioctl+0xff0/0xff0
[ 1822.577384]  ? security_file_ioctl+0x83/0xb0
[ 1822.581794]  SyS_ioctl+0x7f/0xb0
[ 1822.585180]  ? do_vfs_ioctl+0xff0/0xff0
05:28:17 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x4000)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:17 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(r0, 0x0, 0x0, 0x0)

05:28:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000003c0)=""/103)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x8000, 0x8000, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000340)={0x0, 0x0, r4})
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000380), 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000001000000000000000002000000"]})

05:28:17 executing program 4:
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={r1})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x2})

[ 1822.589159]  do_syscall_64+0x1d5/0x640
[ 1822.593055]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1822.598421] RIP: 0033:0x466459
[ 1822.602279] RSP: 002b:00007fe10b50c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1822.610971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1822.618537] RDX: 0000000020000000 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1822.625833] RBP: 00007fe10b50c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1822.633323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
05:28:17 executing program 0:
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x523e23e1c2b6538f, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

[ 1822.641210] R13: 00007ffcbe60c0af R14: 00007fe10b50c300 R15: 0000000000022000
05:28:17 executing program 5 (fault-call:1 fault-nth:7):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x94)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:17 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:17 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
socket(0x18, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000140)=""/170)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1000, 0x0, 0xfba6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4})

05:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
connect$packet(r0, &(0x7f0000000040)={0x11, 0xc}, 0x14)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000000)=0x7)

05:28:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c79e2626c517109b6c2608000000b2fc739ac0d7c009", @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000140)=""/170)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1000, 0x0, 0xfba6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4})

05:28:18 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x10)
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x0, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x12}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x12480)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
syz_open_dev$dri(&(0x7f0000000000), 0x8526, 0x153103)

05:28:18 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x60}}, 0x4004041)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbdf250100000008000200030000003c0008802400078008000500e958713d08000600ee0000000800050063fc7a0608000500aff6e4151400078008000600430000004a920600750000002c000c800c000b8008000900fddc05321c000b80080009002379e65808000a0061b0000008000a009837000028000c8024000b801100090082f8e47c08000a00e8ac00000800090032d22e0908000a00a26f0000"], 0xac}, 0x1, 0x0, 0x0, 0x24000801}, 0x20004045)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x458185e0fbcc3838}, 0x2000000)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:18 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000140)=""/170)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1000, 0x0, 0xfba6, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r4})

05:28:18 executing program 0:
r0 = semget(0x0, 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$IPC_INFO(r0, 0x3, 0x3, &(0x7f0000000080)=""/63)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x4100)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000040)={0x5, 0x5, 0x5, 0x8, 0x2, 0x3})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))

05:28:18 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x14)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000140)=""/170)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 5:
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x60283)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x7, 0xffffffff})

05:28:18 executing program 2:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:18 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x20400)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000fec000/0x11000)=nil, 0x3, 0x2, 0x84})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x8, 0x48000, 0x1})

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x40010008, 0x1})

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3, 0x42d, 0x9})
getresgid(&(0x7f0000000040), 0xfffffffffffffffd, &(0x7f0000000080)=<r1=>0x0)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0x78, 0x0, 0x0, {0x1640000000000000, 0x2, 0x0, {0x1, 0x6, 0x3, 0x8, 0x1f, 0x7, 0x9, 0x4, 0xffffffff, 0xa000, 0x8001, 0xee01, r1, 0x8, 0xfffffff7}}}, 0x78)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x1f)

05:28:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x8c545)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff8, 0x2)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x4, &(0x7f0000000080)=[{0x6, 0xa362, 0x1}, {0x101, 0x1f, 0xfff9, 0x5}, {0x1, 0x81, 0x6, 0x25}, {0x2, 0x3, 0x800, 0xffff}]})

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x7fff)

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x4, 0xfffffffc, 0x5})

05:28:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x78, r5, 0x110, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x44890)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x66, 0xfffffffd})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/221)

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x220800)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, <r1=>0x0}, 0xffffffffffffff9b)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0xa7232e5ff6efb2e3)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r3, 0x0, 0x0)
write$FUSE_DIRENT(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1a01007dede400fedfffff", @ANYRES64=r1, @ANYBLOB="0300000000000000070000000000000000000000f3fe00000100000000000000090000000000000002000000d80900002d26000000000000030000000000000020000000000000000f000000010400002f6465762f6472692f63617264230000000000000000000003000000000000000200000022feffff502800000000000004000000000000000180000000000000010000003f0000005c000000000000000300000000000000ffffffff000000000f000000060000002f6465762f6472692f636172642300000100000000000000040000000000000002000000000000002929000000000000040000000000000001000000000000000a000000000000002f6465762f6675736500000000000000"], 0x120)

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x410000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={0x0, 0x595da626906bb28})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x210181)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={0x1})

05:28:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0))
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x1})

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="e899815077771b0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0xc556, 0xfff, 0x4, 0x9, 0x7, 0x5, 0x478, 0xe5c], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x20000000, 0xbbbbbbbb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000000c0)={0x8000, 0x0, 0x9, 0x0, &(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 4:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffb)
r1 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=')/*\x00', 0xfffffffffffffffe)
keyctl$link(0x8, r0, r1)
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:18 executing program 5:
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=[0x200000, 0xba55, 0x2, 0x2], &(0x7f0000000080)=[0xffffffff, 0xfffffffd, 0x9, 0x80000000], 0x44, 0x5, 0x100, &(0x7f00000000c0)=[0x4, 0x1, 0x20, 0x8, 0x2], &(0x7f0000000100)=[0x401, 0x40, 0x2, 0x8, 0x5165, 0x5c, 0x4, 0x101]})
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000200)={0x1000, 0x3, 0xfffffffc, 0x9, &(0x7f0000000180)=[{0x2, 0x98, 0x9, 0xff44}, {0x8, 0x6ce1, 0x7, 0x4}, {0x0, 0x6, 0x5edf}, {0x7, 0x7, 0x401, 0x6}, {0x2, 0x3114, 0x96ab, 0xfffe}, {0x8001, 0x6, 0x325, 0x7}, {0x81, 0x7, 0x1, 0x6}, {0xf1, 0x0, 0x858, 0x200}, {0x7f, 0x7fff, 0x9}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x9, 0x1})

05:28:18 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:18 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x80000001, 0xf13982)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000080), 0x8)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000180)={r2})
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x49fc, 0x105600)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000100)={0x80, 0x3, 0xbf1a, 0x2, &(0x7f00000000c0)=[{0x850, 0x8000, 0x3, 0x3c}, {0x9ed1, 0x2, 0x2, 0x2}]})
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000040)=0xf94)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:18 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:18 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x800)
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x5, 0xd42, 0x2, 0x7fffffff, 0x0, 0xfffffffffffffffd})
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:18 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4010)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000200", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf250000000006001a004e2100000c001600124f6d470000000008000c0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4890}, 0x4048153)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x24048804)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x8, 0x40)
ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000080)={0x1})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4852}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r4, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e2386660000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x9, 0x2, 0x41})

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000040)={0x3f1, 0x1fe, 0x11, 0x32c, 0x8, 0x7fffffff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000100)={0x401, 0x1, 0x401, 0x5, &(0x7f00000000c0)=[{0x40, 0x5, 0x0, 0xfff}, {0x4, 0x1, 0x4, 0x1f}, {0x3, 0x9, 0xfe00}, {0x7, 0x6, 0x80, 0xc61}, {0x400, 0x0, 0x0, 0x8001}]})

05:28:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000100)={0x5, 0x0, 0xfffff703})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 5:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000006240)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r2, &(0x7f00000020c0)={0x78, 0x0, r3}, 0x78)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0xfffffffffffffff5, r3, {{0x6, 0x2, 0x1, 0xb90, 0x7, 0xffffffff, {0x5, 0x100000001, 0x5, 0x3, 0x4, 0x2, 0x95, 0xff, 0x6, 0x1000, 0x101, 0xee00, 0xee00, 0x2, 0x9}}}}, 0xa0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = getuid()
write$FUSE_ATTR(r0, &(0x7f0000000080)={0x78, 0x0, r4, {0x100000001, 0xe9f2, 0x0, {0x3, 0x9, 0x2, 0x5, 0x0, 0x7, 0xffff0001, 0x3, 0x4, 0x4000, 0x3, r5, 0x0, 0x40, 0x9}}}, 0x78)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x1, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000200)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/cuse\x00'}}, 0x2b)
r6 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfff, 0x101a00)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080))
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000))

05:28:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000040)={0xffffffff, 0x9, 0x611, 0x400, 0x10, 0x7})
semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000000)=0x8)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={<r1=>0x0})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000100)={r1, 0xa})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x81})

05:28:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)={0x3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x0)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
r4 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$khugepaged_scan(r4, &(0x7f0000000080), 0x8)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000280)={0x2b, 0x4, 0x0, {0x1, 0x1, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)
write$khugepaged_scan(r4, &(0x7f0000000240), 0x8)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={<r6=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r6, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000040)={r6, 0x2})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[0x401, 0x1]})

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2})
ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x30801)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:19 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022700000000dbdf2506000000080003000600000008000300060000000800025a060000004000018008000700", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x74, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x74}}, 0x1)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x40020)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="1e046050387437139cf1f82c795eb9d15ce3f00e44f737a397d423a8ba66179afabbdcac93ddb86d03f1c99764a1923d1eb13ffb9a24119bac6bd5bb15d29ac57d0b6a9c702a52a4d545586df1b4985874f816e3cc582a1ac200b622f6c2cfaad65939da6f3ae388450def5d51f4a1f2fd851c2a75a5a928a150c548b8e26a597d15796f83d1520351880e6e81ac2e59f164c5a1a4", 0x95, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f00000001c0)={r2})
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000200)=""/32)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000380)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000500)={0x0, 0x5, &(0x7f00000003c0)=[0x1f, 0x5, 0x1e, 0xfa3, 0x2], &(0x7f0000000400)=[0x9, 0x8, 0xd71a, 0x3, 0x7f, 0x3, 0x10000, 0x5], 0x10, 0x2, 0x200, &(0x7f0000000440)=[0x0, 0xffffffff], &(0x7f00000004c0)=[0x9]})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000340)={0x201, 0x1, &(0x7f0000000240)=[0x1f5f], &(0x7f0000000280)=[0xffffffff, 0x8], &(0x7f00000002c0)=[0x401], &(0x7f0000000300)=[0xfffffe01], 0x0, 0x7fffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:19 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x200, 0x408100)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10000, 0x800002)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0x8)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2})
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/80)

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1fc1, 0x10000)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000200)=""/37)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="b8d6e24c554e74618e970707211d70b70475699cbd39fc4ad3080496fc5ed11335d2cd9323663701589cd7fd8cbd1762edd92ce14c3cbb6db281e683c8305cfb4e6a176360df0ffc90f53a1e3801d8edec549046e3b7f569c82af7c668bf43dc0d5f42136e07d2337f25636d8a69df3890b231766ac0d6e0f6cc18b8e181be9bc4a0", 0x82})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x101, 0x1, &(0x7f0000000000)=[0x7f], &(0x7f0000000040)=[0x4], &(0x7f0000000080)=[0x10400, 0x1ff, 0x7, 0xfffffeff, 0x8001], &(0x7f00000000c0), 0x0, 0x1})

05:28:19 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r2, 0x400, 0xca80, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70225b7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4aaa1bef}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1115366f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x77fc8baf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1638a6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d70d4c1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xb0}, 0x1, 0x0, 0x0, 0xf91fa5d91b7f86bf}, 0x4000)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000))

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045000014"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44091)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x669, 0x200)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x1})

05:28:19 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000000)={0x0, 0x1})

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fe, 0x1, 0x9})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045000014"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)

05:28:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvlan1\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x71}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x0)
ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0xf)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000045000014"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 0:
request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='+\x00', 0xfffffffffffffffa)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x2, 0x640000)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x7, 0x3fa37d46})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x9, 0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3})

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2})

05:28:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 0:
r0 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
sendto$packet(r0, &(0x7f0000000040)="fde59dbb22d6b5c46ea0f5269b6f8828d412f1d7eda7d1e3a8c6177435217b674f7774e7ec0008d27e0a077600c51c715e32580f37bde5c875e46c64ae2cb48d211eb36c49add6620dbf48ca11a602813f2446985d0e85b2d250ce2911402880a112ea6020c4dbde3bfbdd5278b2da04f5162a68d447ea88378d3d49796978818b76e56a935abb49c126eb97b2b1ff6ff3adae9ce33f047f8c3d53cd7f75bffbc6ea072fcd9a42693abba76ebe7ccd0c4cde517d650cbf", 0xb7, 0x40000, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000)=0xbb, 0x4)

05:28:19 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000240)={0xa0, 0xfffffffffffffffe, 0x0, {{0x0, 0x2, 0x1000, 0xfffffffffffffffe, 0x1, 0x200, {0x1, 0x9, 0x100000000, 0x3, 0x4, 0xfff, 0x1, 0x20, 0xffff, 0xa000, 0x2, 0xffffffffffffffff, 0xee01, 0x25a0}}, {0x0, 0x15}}}, 0xa0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7, 0x6}}, 0x30)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)=[0x2739ac8, 0xffffff00], &(0x7f0000000040)=[0x100, 0x5, 0x81, 0x81, 0xffff], 0x47, 0x0, 0x80000000, &(0x7f0000000080), &(0x7f0000000080)=[0x1]})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))

05:28:19 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x410201)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0})

05:28:19 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cc80003", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="800000001500000425bd7000fedbdf252a016a00010001fba8ae016d3069fe3d0531dce83374518c0149a5b87e52493a01ff4ad18e2708685a85d662e087ad1465388b1bb53604b7ea47340cd699136861e297be739c415d5eb0e60bce8f79c220c8a664fdd19a04135d9ea22d4d36edb38930734dc9b8840bdd483100000000"], 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:19 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x400002)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x4, 0x12681)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000080)={0x0, 0x2})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0xfff, 0x8001, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040))

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x80, 0x7, 0x6})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7, 0x4, 0xe5, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r2})

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x45)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544607061800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffeeffff, 0xb7a, 0x4, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x40)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0xffff, 0x6, 0x2, 0x50, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0xffff, 0xeeeeeeee})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r1})

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffff"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl1\x00', <r0=>0x0, 0x10, 0x8000, 0x3, 0xbe7, {{0xb, 0x4, 0x1, 0x1b, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp={0x44, 0x10, 0x2a, 0x0, 0x3, [0x3ff, 0x4, 0x2]}, @ra={0x94, 0x4}, @noop, @generic={0x86, 0x2}]}}}}})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0)={r0, 0x1, 0x6, @multicast}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x2404c801}, 0x20028091)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000040)={r2, 0x2})

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffff"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000))

05:28:20 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$FUSE_ATTR(r4, &(0x7f00000020c0)={0x78, 0x0, r2, {0x0, 0x0, 0x0, {0x8000000000000}}}, 0x78)
write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0x0, r2}, 0x10)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x7ff, 0x5837b43b77ac0beb)
r6 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={<r7=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r7, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f00000002c0)=[0x43b], 0x62, 0x6, 0x8, &(0x7f0000000180)=[0x9, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f0000000140)={r7})
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000340)={0x2b, 0x4, 0x0, {0x4, 0x3, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, <r8=>0x0}, 0x2020)
r9 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ff9000/0x4000)=nil)
read$FUSE(0xffffffffffffffff, &(0x7f0000000600)={0x2020, 0x0, 0x0, <r10=>0x0}, 0x2020)
r11 = getpgid(0xffffffffffffffff)
shmctl$IPC_SET(r9, 0x1, &(0x7f0000000040)={{0x2, r10, 0x0, 0xee00, 0x0, 0x8, 0x1}, 0xffffffd3, 0x6, 0x7, 0x7, 0x0, r11, 0xc4})
write$FUSE_ATTR(r0, &(0x7f0000000200)={0x78, 0x0, r8, {0x7fffffff, 0x7, 0x0, {0x5, 0x8, 0x100000001, 0x80000000, 0x0, 0x6, 0x8000, 0x2, 0x3, 0xa000, 0x0, r10, r3, 0x9, 0x946}}}, 0x78)
ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={<r12=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r5, 0xc0086423, &(0x7f00000001c0)={r12, 0x5})

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffff"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080))
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x1, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x2080)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil})

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r3, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000180)={r3, 0x3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000040)=[0x7, 0x9, 0x1], &(0x7f0000000080)=[0x800, 0x1, 0x1, 0xff, 0x8, 0x2, 0x400, 0x6], &(0x7f00000000c0)=[0x3, 0x5, 0x0, 0x1, 0x2, 0x9, 0x70b8aa79, 0xfffffffd], &(0x7f0000000100)=[0x2, 0x400, 0x9], 0x0, 0x10000})

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac14"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 5:
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r0, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffb)
keyctl$get_keyring_id(0x0, r0, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000000)={0x1, 0x80, 0xff, 0x6, 0xb, 0x1ba2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xbc, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x96}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc040}, 0x2004000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x2, 0xbc, 0x5, 0x80000001, 0x8, 0x9, 0x21})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000100)={0x2, 0x2, 0x8, 0x3, &(0x7f00000000c0)=[{0x9, 0x4, 0x3190, 0x3}, {0xffe1, 0x8000, 0x4, 0x6}, {0x4, 0x100, 0xc09, 0x7}]})

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac14"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x0, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac14"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x341000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={0x0, 0x1})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x200, 0x446400)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[0x5, 0x3, 0x3]})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={<r2=>0x0, 0x0, r1})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000040)={0x0, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r2, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f00000001c0))

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac1414"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x4c, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x0, 0x4000000}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x10000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1433bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="070000000f0000000000090001"]})
r4 = socket(0x27, 0x5, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r6, 0x0, 0x6a9, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x463f}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r8, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000004c0)={0xef25, {0x7, 0x1, 0x214f, 0x2, 0x100, 0x9}})

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/94)

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x7})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x80080)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 5:
r0 = request_key(&(0x7f0000000040)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff8)
keyctl$revoke(0x3, r0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0xf1, 0x1})

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac1414"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x30001, 0x8, 0x8, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r3})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={r6, 0x80000})

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x1)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="67309d19dc72650300000000ff000002", @ANYRES32=<r3=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:20 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1})

05:28:20 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x800, 0xc, 0xc6})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/121)
syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x20000)

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac1414"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 5:
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x800)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x100800, 0x4, 0x1})

05:28:20 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002500)={0x2020, 0x0, <r3=>0x0}, 0xfffffffffffffe6e)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, r3, {0x4}}, 0x18)

05:28:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:20 executing program 4:
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:20 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r4 = add_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)="cd21b6cfc592c494c7e5029ad2bedb99a45f7765e3298fb5bc6c272f7023688587f1d2972d174e5a1211c373f1342a9cd015fe9e8e35c0c05666191ff5ec57c184c4e1c7bce5389a63d633a9e83be03deb901f093fa7c6a0265742ca7b7cdfc2b8", 0x61, 0xfffffffffffffffb)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000440)={r4, 0x7d, 0xf0}, &(0x7f0000000480)={'enc=', 'raw', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f0000000500)="e7c62b95328f3d907ae42c025976cc37e3ab739dc9539e5cd1488612c7c9897192776fa9daec2107ce6be6a9bd5e7fd19ff05ad96ac08ea82761186e1968a7bc36af6e3bb8959784ecdb5112fc6fa6567659ec1683b851a56d0aa54020ee894f7c6f37d3f1e4bf4524719056bf8409bb45119a8e4155b1da5a9a2ef2b9", &(0x7f0000000580)=""/240)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4030}, 0x20004880)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:21 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffd, 0x2100)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={<r2=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000280)={r2, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x3, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000100)={<r5=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={r5})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e300000000000000000009f17ee01613d1aed8b9267e2c23f5e6653230a7a57e512d1a2f78d9843dc8b1a9c1cf2463b2d08fd94e6c5b3c1ef5c819645596f1d93c8183ca59d4000"/88, @ANYRES32=<r6=>0x0, @ANYBLOB="000700190000001f00000008471e001c0065000040049078e00000017f0000010182066b49be2c00"]})
r7 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f0000000200)={r3, 0x1})
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r6, 0x1, 0x6}, 0x10)

05:28:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xf60204d682c342f5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000000)={0x0, 0x10000, 0x0, 0x401, 0x2, 0x3})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x0, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = semget(0x0, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r1, 0xfffffffffffffffe, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x7fff})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000040)={0x2})

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000001c0), 0x3f, 0x200103)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000200)={0x8000, 0x10001, 0x6})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000180)={r2, 0x8, &(0x7f0000000040)=[0x1, 0xffffffff, 0x1e9f, 0xb30, 0x7, 0x7, 0x0, 0xd3], &(0x7f0000000080)=[0x1000, 0x10001, 0x3, 0x5, 0x1f, 0x6], 0x6, 0x6, 0x5, &(0x7f00000000c0)=[0xff, 0x0, 0x0, 0x2, 0x3, 0x7], &(0x7f0000000100)=[0x5, 0x1ff, 0x4]})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:21 executing program 0:
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000001c0))

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x44}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r4 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x40)
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000400)={&(0x7f0000ffe000/0x2000)=nil})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x141000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0, 0x0, r0})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r4, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={r4, 0x1})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

05:28:21 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0xffff, 0x442400)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x800, 0x8, 0x5})
getpgrp(0x0)

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x400, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7be, 0x624000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000100)={0x0, 0x10000})

05:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x2, 0x25dfdbfd}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="4300000001651003df3744c915f02e546231e9317197c1c400000000000000067827125e14d134e88ecad2114348a16ea853", @ANYBLOB="66809a6033b10f3395aad7b3a02a1942ab8ab4c7f4bdde73a7a102d8b6401b0bd3055979d835f4b491d9392ad0005c75e8eee684a2d4030b0324e60c1053a4d3", @ANYBLOB="000406000000fcdbdf250400000008000218b28c36a3"], 0x1c}}, 0x80)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='Afe0\x00'/16, @ANYRES32=0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0x31, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r5, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r5, &(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x0}, r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000480)={0x2, &(0x7f0000000340)=[{@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x100000000000000, 0x400400)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000240)=0x2)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000180)={r4, 0x2})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000200)={0x1, 0x1cac, 0x8000, 0x6, 0xaa5, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000000c0)={0xf5})
ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000280))
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x7ff, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000300)={&(0x7f0000fff000/0x1000)=nil, 0xd02, 0x5, 0xb8})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, <r7=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000340))

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x795e80d3, 0x10000)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000140)=""/15)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000240)={0x30, 0x4, 0x0, {0x2, 0x433, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xd, 0x2, 0xb4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000280)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f00000002c0)={0xfffffff7})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x800], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0xdededede})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f00000000c0)=0x6)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r3})

05:28:21 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r1, 0x3})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080))

05:28:21 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x81, 0x179640)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil})

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/182)
getgroups(0x1, &(0x7f0000000000)=[<r1=>0xee00])
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r2=>0x0})
shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, r1, 0x0, 0x0, 0x157, 0x8000}, 0x40, 0x4, 0x7, 0xffff, r2, 0x0, 0x45b2})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r4, 0x0, 0x0)
read$FUSE(r4, &(0x7f00000004c0)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140))

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x2000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000200)={&(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, 0xa0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000140)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x4, 0x7f, 0x1]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={r2})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0))
ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x1, 0x5, 0x12})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000008000000010078ea84cba4b10000a0ce3674ad0dcabbfe9a289381b63b4c3e5a"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480))
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x41000400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:21 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x7fff, 0x200042)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000600)={r1, 0x5, &(0x7f0000000300)=[0xd6e, 0x10000, 0x10000, 0x2, 0x2], &(0x7f0000000540)=[0x9350], 0x44, 0x6, 0x3c, &(0x7f0000000180)=[0x80000001, 0x3ff, 0x1000, 0x5, 0x1000, 0x3], &(0x7f00000001c0)=[0x3500, 0x20, 0x1b07, 0xb532, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000140)={r1, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x200, 0x80)
ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000200)={0x1, 0x7})
r5 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "f2eeb77f3b215cfd1f63c44744ea4ae5a4941614a0d90ad2fa901cfb40532a2f4e78412109fc905172cf4f4778a8cdba3e74ed8cc6cd1f070a6a3076b14ab094", 0x1a}, 0x48, 0xfffffffffffffffc)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000640)="a9d38e3ed6006c3ed954f3f70c194e73cd02730a348422957c5666de1226f2bf9d14d738e65196cafa6bbe8338b8f3dbacf7dc2df7c829bea414945aff3beb355a518b8ec3ee3ea531bd9d4867e673ac42cbda65e088599a6591a3349bb6f91081b38776743652141e11f2ff6f0453c3b04f34b64418a5ae3628ec949b8826034ed04e9d625f193c302473fd37c9d7926b27188a218af155b7ef12cae4410305d6b0d31dea7067d1ba81a133393035f8eeebc50e83ba9c0e68a95423f558118053b0dc4ec3b5ef", 0xc7})
keyctl$link(0x8, 0x0, r5)
add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000580)={0x0, "fc9435ec7e268b3c4f500ae2fc250c01b8f68f9b4b971a1d207435bab1541b2a16db7674193ad2d1dbd50b327c28e01f4d8f8a1e3f0ce71b7cb2087866d6de51", 0x36}, 0x48, r5)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000040)={0x0, 0x800})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000004c0)={0x0, 0x80000, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x7, 0x3})
r7 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000000c0)="765ca0", 0x3})

05:28:21 executing program 4:
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000))
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x8, 0x8af02)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
write$input_event(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0xea60}, 0x12, 0x2, 0x101}, 0x18)

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x80040)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:21 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xfffffffffffffffc, 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x1], 0x2, 0x3ff, 0x8, 0x7, 0x7, 0x6, 0x8000, {0x77d3, 0x1000, 0x650f, 0x0, 0x3, 0x4, 0x3, 0x6, 0x1, 0x39, 0x6, 0x4a, 0x4, 0x9, "992dc126efd5995859967b97a424d0a3d63b39e99746eb7837a10e362ca658ba"}})

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xa2800)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0xc0000000, 0x9, 0x8, 0x401, 0xfa9, 0x3, {0x80000001, 0x3ff, 0x5, 0x2, 0x100, 0x5fb2, 0xff, 0xbf5, 0x3, 0x7, 0x7, 0x6, 0x2, 0xffffffa8, "ac97f13986423c838438b28703abec8e0a635e5e26e5cf5c93727678279de7a9"}})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000380)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000003c0)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="eea34cf02ec1b9629bfdce040a5ca7c25bea6047ef97b1b70c3454e3bdd90ee8adf04c59846f69157e8aafc280e1c8e6176eeb9a4eecfacd95d03e2688dda409067af31d0c2da32ce4585367442b9fa2a056bb090933544052a894defa1062f4edf4f20635461ced9dcbb79f4a711c2276704421acb88a175ab4d9f27b99aa5da8fd526a8ef4f383eabb4a8b35891d4f14039f3995fe70dd1beea0cf9e0b3b6f6ae6c7cec516eb105e6d", 0xaa})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000280)={<r5=>0x0})
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x48000)
getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, &(0x7f0000000400))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000440))
getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000300)=0x80, &(0x7f0000000340)=0x2)
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f00000002c0)={r5, 0x2})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x2})

05:28:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4008004)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
socket(0x9, 0x2, 0x4e6c)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:21 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil})

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000080)={0x1, 0x5, 0xffffffff, 0x5, 0x80000001, 0x3ff, 0x100})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x82241)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000180)={0x5, &(0x7f0000000100)=[0xa52d, 0x101, 0x9, 0x5, 0x8e1]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x2, 0x25dfdbfd}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000780)=ANY=[@ANYBLOB="4300000001651003df3744c915f02e546231e9317197c1c400000000000000067827125e14d134e88ecad2114348a16ea853", @ANYBLOB="66809a6033b10f3395aad7b3a02a1942ab8ab4c7f4bdde73a7a102d8b6401b0bd3055979d835f4b491d9392ad0005c75e8eee684a2d4030b0324e60c1053a4d3", @ANYBLOB="000406000000fcdbdf250400000008000218b28c36a3"], 0x1c}}, 0x80)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='Afe0\x00'/16, @ANYRES32=0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0x31, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r5, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffb)
r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$search(0xa, r5, &(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz', 0x0}, r6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000480)={0x2, &(0x7f0000000340)=[{@none}, {}]})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:21 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:21 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1c7400)
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000040)=[0x3a, 0xda], &(0x7f0000000080)=[0xee60000], 0x21, 0x1, 0x5, &(0x7f00000000c0)=[0x4], &(0x7f0000000100)=[0x3, 0x1ffe00]})

05:28:22 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0x78, 0x0, r1, {0x2, 0x0, 0x0, {0x4, 0x4, 0x100, 0x0, 0x1, 0x100, 0x1, 0x3, 0x1ff, 0x6000, 0x6, 0xee01, 0xee00, 0x40, 0x299a}}}, 0x78)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1040})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000400))
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x2)

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8, 0x20, 0x1, 0x40, 0x40, 0x400, 0x400], 0x7, 0x400, 0x7fff, 0xbca7, 0x20, 0x7f, 0x7, {0xe119, 0x800, 0x7f, 0x4, 0x1, 0x9ec6, 0x5, 0x2, 0x6, 0x0, 0xa17, 0x5, 0x373, 0x7f, "b39e9d80c361860aa710fc718a40f8c7ed736b2fd9cb2dc4e98996d32880e145"}})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040))
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))

05:28:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2d8, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x23d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5660cb66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x85a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xebd7}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c3f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c7e991a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3840fd2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaed5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee8b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63ecc673}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4dde1da9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b5e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0d3956}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb6c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d79a7b9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x4}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0xc2b9d61a2616279c}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x16c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6223a33d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c85cfda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45d55865}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67e6d90d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5920ee59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dcf7541}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60d76945}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfe7e0fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38a2f606}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170f6fc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b847541}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x185152a9}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32d33ab8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e04c12f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0xffffffffffffff70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41b6cc8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5acbc26a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x797ed963}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f063c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e4a8cfc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e6eb771}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3dbaeeb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x565a885f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x757448a1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32d55f4e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf8a41ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6173812a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54531e82}]}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/12, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x840)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x8, 0x3, 0x100, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0x1)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x8, &(0x7f0000000100)=[0x5, 0x1000, 0x900, 0x101, 0x2, 0x20, 0xffff, 0x6]})

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = semget(0x0, 0x0, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
semop(r1, 0xfffffffffffffffe, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000080)={0x7fff})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000040)={0x2})

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x20, <r2=>0x0, 0x10001})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000040)={r2, 0xff800040000000})

05:28:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x81)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/12, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xf60204d682c342f5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7f}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x40080)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000500)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x503e, 0x5, 0x3, 0x8, 0x7fff, "302596bade9b0a64f4d8e3be03b24974d52f123d2d71adef4a5db5b8e7743a264e5c4de05654b625f62f6eeb6fa3df16c62557b517e7f194a48c42a045113648fb993eb6e4e970c3452de36be3d9128215233ac73df8f7affada53d0f4b72d780c9461859f68d7cf547dc83ae5e255ebdd7d440082cbe90604c851489f7d734c"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4c844}, 0x4000840)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/116)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5})

05:28:22 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc3c7870", @ANYRES16=0x0, @ANYBLOB="040027bd7000ffdbdf2503000000340004800500030000000000050003000700000005000300050000000500030007000000050003000700000005000300060000000800020001000000e40008804400078008000600c0000000080005003e72fb28080006006e000000080005007634910e08000500df951076080006006500000008000600410000000800060015000000240007800800050001870c5a080005008f59ec5008000500605c1c0c08000600820000001c00078008000500a3c00d5508000500ad870b6108000600fd000000240007800800060057000000080006007e000000080005009eea5d460800050048f8385624000780080006005400000008000500dc4ff01808000600bb000000080005002aad5c351400078008000500df7a3a1a08000600ff000000480008801400078008000500e296491e080005009d82e0121400078008000600500000000800050061a4bf0d1c000780080006001b000000080006001b00000008000500e91fa05538000c8034000b80080009006cf46b3c08000a002db50000080009002180003f0800090005c7be650800090074c5273808000a0096be00000800010001000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x10000081)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xc9a6b6e6, 0x0, 0xffffff48})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000))

05:28:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x4ca40)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/12, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x33)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000004200)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_ATTR(r3, &(0x7f00000020c0)={0x78, 0x0, r4}, 0x78)
write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0x0, r4, {0x1}}, 0x18)

05:28:22 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/14, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={0x0, 0x7})
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x3, 0x401})

05:28:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000500)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x503e, 0x5, 0x3, 0x8, 0x7fff, "302596bade9b0a64f4d8e3be03b24974d52f123d2d71adef4a5db5b8e7743a264e5c4de05654b625f62f6eeb6fa3df16c62557b517e7f194a48c42a045113648fb993eb6e4e970c3452de36be3d9128215233ac73df8f7affada53d0f4b72d780c9461859f68d7cf547dc83ae5e255ebdd7d440082cbe90604c851489f7d734c"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd4, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4c844}, 0x4000840)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:22 executing program 4:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000), 0x4)
connect$caif(r0, &(0x7f0000000000)=@util={0x25, "cdf79f1ba524e36cfc894851a1c16839"}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x400, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/14, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100))
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x0, 0xafa, 0xfffffffe], 0x4, 0x1, 0x7, 0x401, 0x401, 0x0, 0x10001, {0x0, 0x40, 0x4e, 0x0, 0x3, 0x5, 0x401, 0x2, 0x59e, 0x7fff, 0x4, 0x8, 0x6, 0x1, "0d5ccb1dde2f349c0abab915bf1033804d0a793d35a268aaf5c24c686d6b9d53"}})

05:28:22 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xca, 0x400140)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x200800, 0xa, 0x2})

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1})

05:28:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '#\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1c}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x880)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/14, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x3e, 0x400440)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080))

05:28:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x200, 0x8, 0x5, 0x5, 0x2, 0x6})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r2=>0xffffffffffffffff})
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x20c, 0x14, 0x200, 0x70bd26, 0x25dfdbfb, {0x1e, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x65, 0x1, "f0c22ea322e9756a3b8ab45552e5d02699b5e81e4ddbfb3bd4d9f1933d2f9b75a62605ba8352fdab565356979312fe5e960b75ca18b0dcc54df7c76c732d9e6a9de8045b43db6b3c2947e48d396fcf29eb53d76774fc7c7781f9a654dacd75d61d"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "c1564fa0c650576fdef6b0991e0e2f206e773e59132db3605278f4ff4bf12dd3ecbad559e625f8f1fe98464deff45951"}, @INET_DIAG_REQ_BYTECODE={0x63, 0x1, "1cff0eeb22bebb71d02eb3572a265883d5251b31d399241988c3e6ecb7231e9fdcff101eaae126cc5cc14e924a6ceb8bb3ad9d087d0e478ba617a89f00296edc2187c24ebe6812933b80b9460f87b81853558356c6f103b2714c0862566cec"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "112841a67c4269b645b89ab0767e4b1f8bd9a6923ec2f53632b8e5d3fde84f61928d758468e4eec1bdf50e07b95d8b60545707dbe61270859eae6f9dedbdd250c08ceb316cadf3533de57bf4b774084545e0081a423c979139fccbcac6d3f172f010ab6e393089a8b51c668445b745352405fc71a576b5803b61f97a2c49ec10dc90e0cbeb90705a90d3a7ca9b7172a568268edde80b22aeac5493f2032b1883656379a4c8ddbe7e88b015a39187a768bf6a5993bc3a6a731f1c3b887e8789ac1720fd99d385130d9eda2b865d7755a8667d97b1756596c60a93546ab87c8316d0d5f99d90c43cba60fb09007b5e00b8269b"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4011}, 0xc4)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x75}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xe1}, @L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008815}, 0x20002040)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000100)={0x9, 0x1, 0xfffff001, 0x0, &(0x7f00000000c0)})

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x800, 0xc, 0xc6})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/121)
syz_open_dev$dri(&(0x7f0000000040), 0x81, 0x20000)

05:28:22 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000))

05:28:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7ff, 0x8, 0x1})
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x80, 0x6, &(0x7f0000000080)=[0x10001, 0xffff, 0x4, 0xfffffffe, 0x8, 0x5], &(0x7f00000000c0)=[0x0, 0x7, 0x81, 0x1], &(0x7f0000000100)=[0x1, 0xc6b, 0x3], &(0x7f0000000140)=[0x5], 0x0, 0x5})

05:28:22 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000400))
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000400))
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=<r2=>0x0)
getpgid(r2)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x555103)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140))

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/94)

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))

05:28:22 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
socketpair(0x2a, 0x2, 0x2, &(0x7f0000000180))
getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'tunl0\x00', r4, 0x10, 0x700, 0x7, 0x5, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @local, {[@lsrr={0x83, 0xf, 0xe3, [@remote, @loopback, @remote]}, @cipso={0x86, 0x19, 0x0, [{0x5, 0x6, "4ad0dd54"}, {0x6, 0xd, "e0f94e00024bb7abfb23dd"}]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "63710c1a"}]}, @ssrr={0x89, 0xb, 0x81, [@multicast1, @local]}]}}}}})

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/94)

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xc, 0x220440)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0xfffffffd]})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:22 executing program 0:
socket$l2tp(0x2, 0x2, 0x73)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:22 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x202002)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x4199, 0x800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x7, 0x1})

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/94)

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x3f, 0x9, 0x1, 0xd1, 0x1a, 0xee})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:22 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x100000, 0xfffffff8, 0x955b})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="ed46c187b7b89903391cbcf83b8b30b5728d08092e49e0ebdb4203757d9b37029b9231f80161f73a7738b6f2a0906fb33ac185c22f1aa0587930b528a0d8be9417dcdbfa0a4c4fa7c706506c43a1bdcfbc96d218b1ffa9b15e6417b32c20728d7a1cac5b8349f71eeb00ceb2ae8898dd", 0x70})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1})

05:28:22 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})

05:28:22 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={0x0, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:23 executing program 2:
socketpair(0xf, 0x80000, 0x5, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xb120d361ebdf3972}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x8, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x80)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(0x0, 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000001c0)=""/236)

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800, 0x8, 0x1})

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0x7ff})

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x10000)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x7)

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(0x0, 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x357c, 0x100, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef653ecd70e7ac3ac893a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf7315500"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:23 executing program 5:
r0 = socket(0x5, 0x800, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140)=@other={'lock', ' ', 'mem'}, 0x9)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'syztnl2\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x20004054)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000340))
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:23 executing program 4:
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x7, 0x101, 0x9})
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(0x0, 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x400200)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, <r1=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x5, 0x5, 0x2})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000040)={0x0, 0x1})

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="280476e67eb58681cc0d3d713f148f394d021def2d3abd", 0x17})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5)

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x40, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xb64}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x4008000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x9, 0xa12c80)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3, 0x400081)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000140)={0x200, 0x8, &(0x7f0000000040)=[0x5, 0x6, 0x1, 0x6, 0xa32f, 0xc, 0x9, 0x40], &(0x7f0000000080)=[0x2, 0x1, 0x4c99, 0x35a9, 0x2, 0x9a, 0x3], &(0x7f00000000c0)=[0x1, 0x9, 0x1ff, 0x1, 0x3f], &(0x7f0000000100)=[0x7, 0xfff, 0xfffffffc], 0x0, 0x2f3e})

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1000000001, 0x640c42)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil})
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2, 0x5, 0x4c})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f00000004c0)=""/4096)

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x5)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, &(0x7f0000000400))
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000340)=0x200, 0x4)

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x3, 0x0, 0x2})
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x2, 0x1})

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x400100)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x13500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000000c0)={r1})

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x85082)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x400)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080))

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01001a00"/14], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r4=>0x0}, &(0x7f00000003c0)=0x14, 0x80800)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xd0, r1, 0x4, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000680)={0x100, 0xa, &(0x7f0000000400)=[0x4, 0x500000, 0x3f, 0x7f, 0x5, 0xaa, 0xffff0001, 0x4, 0xfffffffd, 0x3], &(0x7f0000000440)=[0x1ff], &(0x7f0000000480)=[0xfffffe01, 0x3, 0x2, 0x7ff, 0xffffffff, 0x30000000, 0x5], &(0x7f0000000640)=[0xd3, 0x4, 0x401, 0x8001], 0x0, 0x2})

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
socket$key(0xf, 0x3, 0x2)

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x200000003ff, 0x406c1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="5b2b22c0f226dda021afdc8ef30f1c0788b0b1b674712fd4042617542aab32839a3ec531a421e3dfa2b349361919391a9e0ea608dc8aca76b1234da1c3cd014911990e33629baf87893dcaee406c75282d601ebe76f9057b7184c7d782f8d8280321efe4a018c0ebca80307d03563a1aa52852433e99ea41e85695d55192315eb1e861fbb3b4bfb9cc3bc3cfa01c8c4e3dcc6546716d7bbd8562e85e2fb82f05b323aeb7fd2b173b88c487c8b7c73685aefcf0cea618a3", 0xb7})

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x80, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040))

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x1018c1)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000})
syz_open_dev$dri(&(0x7f0000000200), 0x7e6, 0x10904)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x3, 0x30a})
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x80000001, 0x40480)
ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x7], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x1, 0x5, 0xbbbbbbbb})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040))

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x1f, 0x101})

05:28:23 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$input_event(r0, &(0x7f0000000040)={{0x0, 0xea60}, 0x3, 0xdb1, 0x20}, 0x18)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x10801)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000001000)=ANY=[@ANYBLOB="1000000051791c720ed8086d82fd87a446f9c3107ffb98be58d29228a7e974446912000000000100000036bbb231ca6c6bf43902d9c8e0360fc5f04e7787a9457b0503c1b00328962d83058a2d0c86c73241c17dc8d6cf1f1a17602468d37ae7078e76c6938a89f700d7f627c954ea0beb11ae4ed2353ed0c0a44cef56c85b5753d65e6e1c100f33bfdc5c5f3931a3a33bfafd270bb7eed892aacb61420f6518a1982b726a61cbd79d322ab2712b521fb55a5abaec9d32ab8f23906fe6438063ed5e5f8f7049", @ANYRES16=r1, @ANYBLOB="000027bd7000fddbdf250100000008000300000000001400018005000200800000000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000bc0)={0x39c, 0x14, 0x10, 0x70bd29, 0x25dfdbfe, {0x15, 0xc}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "d3b1f8e74737498c5f33319b30"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "4ec17db1923cba530c85acaaeb953467ac607cd19c0cae5a9174ad9fec443a1668d8773225ed7b969e105393488b155804e4aa4697629886f91586237c3398e375e4dbd8784f177dde1322eda6856cc6ca6475"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "e8608848ef2526b3406dbc1bf269043a2a17e218fa422fbef79f8889b4900af07e03bd2fd42fcded14bb9e5af8447f99eac296d6b0610cfba2926f2615eda84131d11f6a6d8493ba1cf0c9e57b130f6a7da7"}, @INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "ea0788fe2d442a791cfda47797e5293b037f6d07d18ef01181ac2806c84be5dbd4d5802090814833827612288283a02df0d182d9654040e59d32d07b7e8d2fdd19fd5deb7bba102e3ff9b0a46da54139cdcddb2804c2c64f4bb09954b4c1474790cdc11e1503aca92116474bbf36c0f69ed9f0239d8f75deb7947724f0fdcd43438f13102b20fb4ebce1f98265154fd6a359680951dd393ba413bdd8f738540cbeb38202"}, @INET_DIAG_REQ_BYTECODE={0x84, 0x1, "5fb6075b48d1d39ab5d51c13771b41857e62c03cd09e52febc29fa27e19f7bd5af3fa6ca7f6ec09dbde05471283520fea2ec8738ea9facd993f7355beb78f40f771df98aa8be218c1e1f3f4519f4577f4c7f71b57307e45651a8954cd801bd784a0452cfe22b4067554cc2b1335d7edf206998f03fbef037dd12c9eece9c1a4f"}, @INET_DIAG_REQ_BYTECODE={0x26, 0x1, "ec82ac88d92de26cea1bdddf5b895612789123259d26dc435994e825420a046b8696"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "012336b87433fdd424d27b9c70fa3b0fb59a52a58e72fd2cdc07a2dd5a477a4ca6a76790ae2555a78ab32654a813ed9a649c315a02cefb1d68cf7d0c3f5101bdf546efcc335efc970dede5c83c83796ac755b2c8594a86158a6f45bfbca57070bc806bf5ea6f07a94ea436c18477a4ebc9e172c29dd6a4a9168423a9a490c6f2f30f1e3b55fecf631907341f78da6a3dbc437bd6846baecf7b8552e30fb23afe9be2b6fd89c0550c349f28569b01980154dfc73ba49769b475a171431299860319a0904446818dd9cac8f109dccda1b2613c0ff49965de54798f92d6564888b95fb125906fa102dbb45ba8c275826f143e09"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "0342769f39ac905aea3a7ef0c220afee720f95a1a200f03cf0a59bce9d9e6e015491da4c2b600cbcbbdda11af0734ed1025c28335fa37afcc3b8cfe9144e5246790d8c8c95e8f98acc3417b0e831ac151bc5baf8c6507f40b7a6ea5c727498ca64e916e98b03d2c41b61aa6689a19217e34b"}]}, 0x39c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000b00)={&(0x7f00000004c0)={0x614, 0x12, 0x400, 0x70bd2b, 0x25dfdbfd, {0x18, 0xff, 0x3, 0x2, {0x4e21, 0x4e23, [0x2, 0x80, 0x4, 0xa00], [0x8, 0x0, 0x9, 0x3], 0x0, [0x1, 0xfffffe01]}, 0x4ffbea69, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x27, 0x1, "3cbdef8b8eec74022664d3baaba08669952229fa1f64a90ac0ede4f5167432f7a6c55a"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "5239d4a236e186bd405ab7da05ef624d68f5d74f6315a0eb5ad4ee46753a"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "483c47f08b7d2227159558b1446147cabe8dfb89cc649072a85dfed8cbb7217bd5c305c99d2783d9d50edc83c4ec0f54bdb1aa986b4d66ff311b6f0c516ebf0ef2c2601631f6e66b21b8278a42b000ba73dfe0220bee448c08d90394ccc4c41a9f8a3e5a428b5bd6af718dc42f73e43f977e78aca93845f1cc3747993f9866f4e7965ba7f7a0503ccbc54e1464a2a922dc2e3e78faedec7ea99c9430638949dbfcc1"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "106c7a7d0214d198ee70dc5f30694a62620bb94e77d9cb5b64d5be0955fac356463ef0818ad789de164172e0d512e50442e0354496ad31331e5391a2102ec6f733a024833cc2e8caec7f4ccc57df2cd43a33387c05e0efa9d826f0584dd6a38424b18b6bf2acc2087f1ad1efb50440245bc78c063e4a4df0aee92cdc9720f70a59d9b3b6301ef980555d9e27367c443326ce8b0bb14c515909854ca2e56e1df7224345a65ffc4a34b8c5ac6f7a5880eb5ab988f237fd78d4fee5b377300b"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "eea9c650ebb363ecb30631ea8993538eee7b737b073375ba027da7cbe9281ae51aefb02ae8c1127ce60458665081b11b6a03e3eb04a1e4de305faa7621963decaa9b287dfe8338139e43ad58a7a406c36c6258c8e2c3d394b34475ffcdddb149fa77c0bc4c02215d6739a93ae76da5e03820ef7cb40f1219070e54dfa50f25e8d8e4fcb1409bf3af79170741167513d14b75f28c3c555c276d2f728c7b36568fe9a243ea88fb63ae47d9648ff926d7f03fad57628fe9b0f318af23a4ce658879ea3460c123a68ff1379d75e4fa1cf806f004c03061db1adf81ed574922891cf401899cb56e"}, @INET_DIAG_REQ_BYTECODE={0xb8, 0x1, "93328dbf8a9b499e937100b537ed9d809681b26bcd537fc83762f96e80dbc17e6f519d37a49c10259c13f17c011337df06f86617187bfecf302db1cbe008687cd8e759346b54dafea3ec48d74473cd70791e780bf3cb6bbd56cae4c3f0cd75ecb250242a0ab16eb6c8083cde7a9efa195dca3469353750a1f0465a707dcdf83542371477f0e2606ba853a7a918feb77675ff35820983e242cbaaf2870c07f38cfe7c3a3f897221bff97202eec5cf23d617ae90f2"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "8d087c7c7dbcb4545f773fe5f0a4d0ad68d106b75fb3"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "4aaae1a46cf25146171873cbe081b744407db61bd1935add5a75abeb820223cda91a0863c2b7273fac1d98f0ebaabb640b020cd614a1313a3dc7d2eaeec518dbbb6f3e0d4a97e1a951001bad385e8ec1e0085e36081b60d29040e686a4df7762931daf800da315b7c6f4420c446d83c6f2"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "a18c8ef27873520182c6832620c98404b9922cdab79bdd063380b71ed1a5ef1d893a7d9f74bec3ba7ba1b5abfd37b47a04bb2948cea629d913d393f76d3dc961d6dc0a08363f5781dbfa59ee9d1dda774dab789ebd4e6cde35779b41aa985c8dd03d3f02a51d58cabd972a2f809e2e5864bad1bfc4d858db63a7f95b25b58722da46b225ea8caf192f2c4b154d7a600748ef742a3a60deb0d1c4f253faa32368c7464d9b7c4ec3c483ef3205c322c520585a94b5345ea4c11c3fab09cd33e58e3eed3d10aed607b89c6124b69966cc3307d2724b"}]}, 0x614}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000050)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x8000, 0x40001)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x2, 0x5, 0x1, 0x1, 0x1, 0x9641, 0x6})

05:28:23 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x22, 0x3, 0x0, {0x4, 0x1, 0x0, ']'}}, 0x22)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x18}}, 0x20)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))

05:28:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000100)={0x3b2, 0xcf0, 0xede, 0x7f, 0x18, 0x2})
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2})

05:28:23 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000))

05:28:23 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000000)={r2})

05:28:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0019ecad4dac75500ec1c65c373f736b2a97a6af4c9251a5efc9cc93d431e7dc254b4ced6a61e0df25a50faec6e5e11b5f6b61d0812915feede8793dd991c30ef9bf02f05020782c9d8e9efe79b723960b60fa5ed4fc9357a612dfa7e4d69621aa1a3adc8b04b1ec"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="074c8a070000208000000f544700001800650000583d65d6fa35a7f5d31414bb94040100"]})
r3 = request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='erspan0\x00', 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000210060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x14, 0x300, 0x70bd29, 0x25dfdbff, {0x1d, 0x1b}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "27062d7ef3522300f863aa6d6ed7d5c1fb9ae8b6182d34e4028a7b2f6611fb92bd8afac26be6b00a0d054af481ac9c7462027bbd81f0d6ad71f7950834e6ae13a2c0d4f6b60d"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "c8a297f06b348efadfb1923d2d8bbee89666735567b9105040d4c4f4b02991ceecc70ecdf18d88887a48e4ce16bba4c10dd77a9a4191b814258ff43057826d8ac150610fa84872de84799b694368abbe3e04adddb4d4638deff568c31563f634c5b22ada6c54b8985831c9634e440f086d6b2fc9e0a784c4c30026482419eb665638fdc30e00c65ff7f05f4940f5d97e7173b664c23400c0cf1d0fe1c75b94d5515741da52fcb047949beb0b07ed68984688fdd5a6ae4649f906b342c669"}]}, 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x10000000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3b)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:24 executing program 5:
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$revoke(0x3, r0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x40000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x804, 0x381400)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000080)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x101)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0))
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000180)={0x0, 0x10000, 0x0, 0x6, 0x10001, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140))

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:24 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800, 0x8, 0x101})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x40200)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={0x0, 0x1e})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x4, 0x8, 0x20, 0x8, 0x3f, 0x251f})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$FUSE_WRITE(r1, 0xffffffffffffffff, 0x0)

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={0x10000})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:24 executing program 2:
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x40}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8010)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x10000)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffffb, 0x0, 0x28})

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x3f, 0x0, 0x7], 0x4, 0x9, 0x5d6, 0xff, 0x8, 0x4c66, 0x8, {0x40, 0x7e, 0x7fff, 0x8, 0x5, 0x7, 0x5, 0x400, 0x5, 0xfff7, 0x9e, 0x1, 0x2, 0x8, "00e755eddbadb8f09cd443f76ac933027e81cf3cbc232be80cfbec4f8bd84819"}})

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x1c0400)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000140)=""/12)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x2, 0x7fffffff, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:24 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4)

05:28:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x44}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={0x0, 0x7})

05:28:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})

05:28:24 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000040)={0xc8fc})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140))

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xbb, 0x28080)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fc, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000080)={r2, 0x11})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/158)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01ffff0000000000000001000000c59b8c799227ee26ea82807e6f6005842f84cce15c41837f9866b07201d80cb1ed13f2ba9afcde6b34ee27b47499f308f15e974cbea00d10a813cef31d5f216f57fab6f6993c563da298142845dee2ecc95c1daf09bcac0b01a0954311dde6cdae71a5ade56b6de7b4ff85dff90e692d40cb10cab108b0919368f2c2eae377698742bc9069e68ca4394dbbabf0fe70e8d79d37405064bf0dc26fca3140e705eb3b58126ac679dcc75e228ed58759f38fe6b12710bf70f7a89c3a9084703d3aabde"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="14ffffff7f00000000000f5446000018c3ca9ae4112e00650000582f9078ac1414aaac09"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="070000b54200000000d108ea996c000078ffffd2c3a4daffff"]})
shmctl$SHM_LOCK(0x0, 0xb)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1, 0x80000001, 0xc6, 0xcbab, 0x121})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1f00000000000000000008000000"], 0x14}}, 0x0)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000700)=0xf4240)
r6 = syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x0)
ioctl$BLKTRACESTART(r6, 0x1274, 0x0)
syz_open_dev$sg(&(0x7f00000004c0), 0x200, 0x2200)
ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0)
sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf25130000000c0009000200aaaaaaaaaaaa0500030006000000050003002f000000"], 0x30}}, 0x4)

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:24 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 5:
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x602000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x800, 0x8, 0x1})

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000000)=""/175)

05:28:24 executing program 0:
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0x4, 0x6, 0x2})
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x505141)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 4:
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000)=0x80, 0x4)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x400000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:24 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xc00, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008804)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r5, 0x38, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200))
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ff2000/0xe000)=nil})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1060000000000000, 0x2080)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/36)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000001c0))
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000000c0)="bea747bb16e5a8d477133f45157818fea8787b43371e9fe6381b", 0x1a})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x8, 0x80000000, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r2})

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x1, 0x0, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r2})

05:28:24 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={<r3=>0x0, 0x0, r2})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x2c)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r3, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000380)=""/214)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={r3, <r6=>0x0})
r7 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000002c0)={r6})
r8 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000300)={r3, 0x80000})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r8, 0x6430)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/232)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:24 executing program 0:
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{@none}, {@none}, {@none}]})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20040)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000000))

05:28:24 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x6, 0x404000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x9, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0xffffffff, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={r1, 0x2})

05:28:24 executing program 2:
r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "fc996e87f1d0594aa568d4e6d19c752909bbd561d17ccf91a555df57cff0bc88ee8e6624986a8e158b9d4cb4c6fb4a3acb3db104d3d7ba1361a79017e8e1df22", 0x23}, 0x48, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, r1, &(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0xfffffffffffffffb)
keyctl$link(0x8, r0, r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000027c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002780)={&(0x7f0000000400)={0x2374, 0x12, 0x400, 0x70bd29, 0x25dfdbff, {0x1f, 0x6, 0x1, 0x40, {0x4e23, 0x4e23, [0x92a, 0x2, 0x7, 0x7ff], [0x20, 0x1, 0x7fff, 0x8000], 0x0, [0x0, 0x401]}, 0x101, 0x80000001}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "1b0a1d3c7c2eca7c957a0d9e3c2acdc8af9e83bac93cb16e98154fb2d757db32503777fc88e80b54712abe39cd94312831ac60ee7d012a3f8e224b1e20bce0ffb5ba563921a1270dfe3e5b2b02094707c04c2d275cc40499981be45ed62e2529db3d8d04552b0e83b75ce296831b8732c8"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "d5ae5ee6bbe508b73e0b42712c58ecf0b619736ac0e6b80ab46fb31b38abb5ebc8a5a68dd5e9f26d68d5e3866fa5223c9c911a0f5705ae777ba903b75f0422c0551f2d8456cba430d17e59ca2683e107dbe733edc75bc852c9c714f7649a6bf5f71ae870ee70d0602b1d65d6789a356999cd64fe8301a1af4d325ae6b0817d5b35c430f9b0cfb6a0908b17ff37916f86a130a65fe3ea43f20a38ad966b6a900f7f51d0662f959468"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "b1759505be2271051ea39365cd3f806774fd545d04531c5601e4e4dc56ed56180adbb0f6ef26919e2724affc52078b"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "71c95f1d73788c3174fec01e96682360c9a6f97518046e2732d1f101a1e97570e2f73b73b0fbaecf1bdb28492156fb7fd7dc80f5ea34f30c04d1458d650a637d3ff93814f637ca973c225fe1840c6c75484f143c9507b2427973eaddace76a58ddc0d1d7aa2aaed7c4dac3ea1515"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "fb09fe2a21f0d7a12878e7e1afc5fe18c16f63d6d7c18ec42dcb8e34f4ea83fe599feeeb53d1634c455868c1f4fca72d846648e3cfadc210b15c89da3ad3919af592f0dc4a9890fa0099312267f568bb980225479ccf49f8383857fccf54a45dc5c74868727cc0ef2d9f1d321988ba74f56220d27660980eb292ff0cdcc155a913fb2764e037f10fd4c207d82f81cb936735a6551f670d98df227a498aa3d5dbe8"}, @INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "67e0fecbc8af4eda37ba66ba9f2b8fd4b5f78c62abecbae2572e9f1d43988a51e64bbbf9d0acd7b18a82bbc2332857c3bb8eb9cbdce5760ceba23f3203d87d64708ecd0975982bb539283bafa4e65aea6913535313339128e57a3eeb6b0df86f7284bd06402a1072868e0548aac2705ef17e4705c5911250005f473b2a5be86e562fda11a40871d9c1278570b27039da127f05926cdcaca30b8b76423b1fc29c82ea303e2f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x2374}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:24 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x6, 0x2, 0xbd})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x50, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x74, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001540), 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r8=>0x0, 0x700, 0x7, 0x80, 0x8f54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r7, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x68, r7, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x3}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x880)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="07000000000000000000000045000014000000000009000000000000001e0001"]})

05:28:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:25 executing program 4:
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000040)={r1, 0x1})

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x18000000, 0x30800)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000))

05:28:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:25 executing program 4:
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000140))
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x8002)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="18d95e84af34dc329c9abb416c92f7c4f45ed0fbd70866cf6ea62de890bb6e94e6838bfe6fc2b4ca253dc2af7e22e60f2600c7a961de957d9d13e2d5547c3a98b992af580e6911abce3cf3fadb5eecda0d11193fd8ca", 0x56, <r1=>0x0})
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0x0, r3, {0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x401}}}, 0x78)
read$FUSE(r2, &(0x7f0000008280)={0x2020}, 0x2020)
read$FUSE(r2, &(0x7f000000a2c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0xffffffffffffffda, r4, {0xff}}, 0x18)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r1})
add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="dcdb87abbeecd8bbb8ae8cceaea35d750bb6af0fe1d099e27774ab79fac508910502c13057bcd427f11e29d117ec4ed8ceca3b6e862a9ef7c907a801ad442b634555c295e6d162f140098b54cc703f1f7a76ac398d0115eed4553976b32d", 0x5e, 0xfffffffffffffffd)
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000006240)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_ATTR(r6, &(0x7f00000020c0)={0x78, 0x0, r7}, 0x78)
r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x0)
ioctl$UI_SET_PROPBIT(r8, 0x4004556e, 0x15)
write$FUSE_WRITE(r2, &(0x7f0000000200)={0x18, 0x0, r7, {0x81}}, 0x18)
write$FUSE_POLL(r2, &(0x7f00000001c0)={0x18, 0xfffffffffffffffe, r5, {0x3}}, 0x18)

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={<r2=>0x0})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f00000000c0)={r2, 0x1e})
syz_open_dev$sg(&(0x7f0000000080), 0x3, 0x10080)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:25 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x519101)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r2})

05:28:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000000c0)={0x10000, 0x3, 0x6, 0xa, &(0x7f0000000100)=[{0x80, 0x5, 0xfffa, 0x28}, {0xffff, 0x4, 0x400, 0x800}, {0x4, 0x7fff, 0x7, 0x3}, {0x4, 0x1, 0x7, 0x6}, {0x0, 0x5, 0x6, 0x200}, {0x5, 0x1002, 0x2, 0x8000}, {0x1, 0x4, 0x81, 0x1d}, {0xea, 0x8abf, 0x2}, {0x8, 0x1, 0x5, 0x5}, {0x3ff, 0x0, 0x5, 0x7}]})
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x2, 0x48})

05:28:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000340)={0xe, 0x331f, 0x7})
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000000)={0x2, 0x5, 0x1000, 0x6, 0xa, 0x8})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

05:28:25 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={<r3=>0x0, 0x0, r2})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x2c)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000340)={r3, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f0000000380)=""/214)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={r3, <r6=>0x0})
r7 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000002c0)={r6})
r8 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000300)={r3, 0x80000})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r8, 0x6430)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000180)=""/232)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f00000000c0)={0xfffffffd, 0x80000001, 0x4, 0x7587, 0x6, 0x1ff})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000040)={0x6aef, 0x1, 0x5, 0x6, &(0x7f0000000100)=[{0x8, 0x8000, 0x3dbc, 0x226}, {0x3, 0x401, 0x8000, 0x1}, {0x9, 0xff, 0x4, 0x1}, {0xf548, 0x6, 0x0, 0x2}, {0x4, 0x0, 0xfeff, 0x1}, {0x800, 0x2, 0x3, 0x34}]})

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x200, 0x57d03ceed6029319)
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x8537], 0x1, 0x7ff, 0x3ff, 0x4, 0x10000, 0x5, 0x10001, {0x80, 0x81, 0x0, 0x7, 0x7ff, 0x7fff, 0x7, 0xff, 0xeb14, 0x0, 0x5, 0xfff, 0xa144, 0x1, "f5f6b6b995227939a307e89229c9fc5756a51fcb20057d0eb281ad49e721d523"}})
keyctl$revoke(0x3, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x800, 0x8, 0x1})
socketpair(0x28, 0x1, 0x7fff, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
sendto$packet(r1, &(0x7f00000002c0)="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", 0xfc, 0x4000, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)

05:28:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
msgget(0x0, 0x80)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0xc00, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20008804)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r5, 0x38, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x20}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x10000, 0x208100)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000})

05:28:25 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x6, 0x8, 0x9})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x8], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x1, 0x2, 0xdededede})

05:28:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, 0x0)

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 4:
r0 = semget(0x3, 0x1, 0x20)
semctl$GETZCNT(r0, 0x52e84c6b75dac9a1, 0xf, &(0x7f0000000240)=""/25)
r1 = semget(0x0, 0x1, 0x21d)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf25040000008c00088034000780080005fee6f3aa3008000500a0fd6e1d080005007050692b080006000300000008000600a20000000800050037eed221540007800800060021000000080006000900000008000500ae32f84e080006006e000000080006000900000008000600d1000000080005000f21a754080006003d000000080006009600000008000600f7000000"], 0xa0}}, 0x1)
semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000280)=""/193)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x9af82)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140))
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0}, &(0x7f00000003c0)=0x14)
connect$packet(r4, &(0x7f0000000400)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @multicast}, 0x14)

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x8, 0x401, 0x5, 0x8, 0x5, 0x1, 0x5], &(0x7f0000000040)=[0x0], 0x7})

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x6, 0x2], 0x2, 0x2d84, 0x200, 0x3bba, 0x4, 0xf3, 0x6, {0x2, 0x9, 0x9, 0xff, 0x7, 0x5, 0x4, 0x1f, 0x1000, 0xf0, 0x9, 0x1, 0x7fffffff, 0x1, "9b7f02583d1802a6ea403938c235fcb6987edeeb5d0d6b5644e38fb6d59eb99a"}})
ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil})

05:28:25 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x3, 0x1c0400)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000140)=""/12)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r3})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket(0x18, 0x3, 0x7)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="541100001400200025bd7000ffdbdf2518025c0001007a95386adbadbbaaa7f3eb7e0bcd510b7b0b9fccf341e9bae576f7c01da887d4ffd0c6b6e3a593b4790cec71356139739f0a55c541cdff5398c234023b7f68a1df3ae80b06c41332f269c17f4ab9f047eb4a14dd0eb9433e1f000100fc9d4fd8e661aad2244da70bf20319f2a91240bf1e7e5e9cf4f2150004100100b57fe49af917f9bc5c0edc0ad809c64b29078b63ac67e187126e7002c91b8a804e385320d9d8cb2c90d5f541e336c63c3e7db29ae2e8a89b49ef6acd0bc3e4c876ed61d1abb6045b1cc4d07b74f3602d35f79e76d60e0c5c02e858021917cce577c4bb23e80a0667cfaba7dc20070d455fce6a1288b761cdb9ba52d2920e80a760e664cae6353499e9fab02743712a816b8089de935465525b1d15c6acb388c4bce841045a58ba3ac7d3c36ee39bdc3d3a37289fb40efddc26f95d2eba3faa6f0f475d417e6dc1e2c98a3269e9bd099658f4a9cae383d7b0f9ceeb4fb8adf20d956e85adbbd38ec3c8af6cec1ab45ee6a991c3d96f1bc198e9523cce3050d447ae121800664d19dbaf869d1f374e71ac450721a19093b9a249f98cbcbd024c1b6bde701a90b05bd82ecd6dbf93b113da60ee31e56b67b8f7305d3bc26cda232a4411719fe573b625cbae0df0fe6db7ea2cc7f354ec91352e87ddc5024263a8de0fbef17f8528abff8a7992e60d77cc2760c09917b949e25c20f170b1839c5e37845693c63e241d0c1cd4375fe5e58471ed13cd92ceaa5a7cf1d0e1db12d00502199e8ea2539e0f9f0e7a23cf4f0cd86664000a45e6bc0005fe90e763955578b71d12c38e33edbb8591673833e6ed3b18aa79ce81a3b8aba36d1dad0b1abafe6210ee2c14a6913f8157ecba6a5a86fffd89a10e51a0fcbd49a93fa72c0ac23b33e5795879bd14af7612f63fae03928a47e7b868dd42344c6d7372baa05ab6b7138b80ef2ca855a7eb95b2bb0b0676f29407b5f34e2849f49abb18c838b0aeaeb02a38d493903d8b059f3b4f3fdb5f84356b0430f0fe8167a93a5f5ed0cfe01e6d6a1162ec6ce54d923d63e79d0c09aed2e59b229ee666afbe6dfa7b5b0297f81b5fb4e173ef84757231163254e84ad89db436f076afe6c066fc86a14222caaefa5e4fe57848d3067640c24b55ce73fd3af9b71465b060fb1188677d3ce61cf14f2b1f24f34fed24d0b1a66d076aa29ad88687254c4694bb753fe339cb4266949cfe0e44b4b7d752949d1e44f17d453c69e299ccc0680be49a9f6db2671ee24abce5caa569aa5a36851c6dae8ac8e7ff756a0e190d88baf0d56f6f24f9edae019a8f45f9e74a031715f7a6dca45d644c1007354bd3b08005a1ba810274b9f88488038c63af22b70dbd492705e3ec0f945741ed1243af52d67558db0a8090afa632488305973d175d172fd87e951f418d63748cb3f2802588968cc920a59f582519b156b5b24f413fdd8bdbba0f0d1572580991994cdaa77ca5cf6dd89e2f0c741daf26d5d6ea650c8b150976a0b0dab4dac252a3d20a7e028d5405c48db876510df9eb369a8e5c60858b1a4e8bb4b343520fc437dd3c324944c12158f1a3c9da1e2f1a4d637163a1d84976421fb1c6d882b0cca1135f125344647ef957c182475508713c205e78abf315c33c0274f649aebdf00f8c25ab60351603d043df419e1c882e9c4cfb433f823ca8a30ae629c6ab145dc79c9ff5a68432a5b1f65f5bc65dfe344af164ef015d8d75ec5cfab9f50d2911de04abdf00b7fcf0540fa528427ad19a66cf585ec8e86b98890d121af78eebb16047cb8985d089ea78d94cd65419e464b85b4727111e4947d5271b92ed2ccfa4a4defc43dbfaf654146abebbc59c91de252a8a66ad1ce11facb3fdb342e022df16d458510e47eb73d94681cf471fec243e10b858113ff13ba2d197674936a81b8a1d003e1acd8007755023accea306f1382662b1a47a5bf475413b7c668f542091fc4a31c99d5febb964e95fc037d19545e9e665899306b0d4c7cabfbd410d1cd7ed805a8a335a92ff231e654574cee1e35f794a7b11dc830b3be6791a25a3ae7be2e1b6b97e657673e5717bc6c5ba58127e74f28a44a277962f3c9bc5a9f7cbf4b3fd498aa1ca40dd0a3f4475dbd8cf7a885fe2651c24ab7b1df6a59dad88eba7ee8a49333758909277bb14b486d3e498ab4be29e7c77658ed53e98e65c4f2f3869db4dc9cc9f4bbc8e20a01af0b83253c69509002522fc37007a5212078aa322d47c60db05f7eba03c63a4e58b64277653ecb5683e1f6a08f9870e32bcab9f17bf3541ee9d0811e14229bc80fa8d5dcdd95f401ba6a93a1682659605d835a03d12cede5774e73392a54db09a15b52af77b6256bddea7d68b6a3f9d3a838975685068e9f3dd99cb3d8d3e1bccb62d44b66549e0e0154ea81eb4d662b7553905be1f91c38e3d333474af04c098493ff112ec46828e02f5a89524ab49fd76915c6b7290c736efc39cce58b283f1cd1b33ec532ca93c9f640743510188f332cbe85c9f33bf187b20f5ee5a5f95c226db2437a232c9cb70e0fb9a78a082c0c9e39a8138a1f267d122295ced3104f6e5909a209d58ddaa56418ba8b64716ae44019737ffa695c1fd16770bdc28bccce4a2f1737a324449479e81f9b2575a32d03cc56e42dd7186f228984354d0dc28172164fa5fe7465f38e5de39fcd416e8509f313bc91c3b3b12fabda5d43d2b3296b75acac7797cfa389494e790588f91bcf5cbfe4fcd719ea951801c0c3986bd26a7c78520a87928e4193c9cd4f4875275d2b762b7a364ae601dc3f84161a505be46712c20d1363dea32a975b02c6b4fed6ad0ed5c1e1020eeedaf0d7e846c80ce0cd74652d71a5a3d9f986398176fc5ffeaf2206dadb6dc9731642a61b647fcc214af47d6e9afd1f4fe2c30d4d479bb66d457071959eb4831e753e00bf467477b21f619f52a2b360a48b9589889f6aeedb1854d1de6e27f74971e96e7fbbdf186147b1f96e20bb2e5a892940282c66a55cf49e0fdc4667ca1d730f8b5c70ce006b5d470b9247ceefd57b66e81edb738774659cdd6acb012ff84a16c599def07a183f3f8d1d31d605d0e31be1f275033bd3ad92f46275482f22434d04a343d1af5e36b1fea0435afbe135a7aa41b6c4268c5bf87ba61971731f6fa7ec6907582dfd39f91c1f8bf0a589b34465ed7667e3b5e8484fbff28ab251dc44ec360c6800418614c50b3dceec7c479194c1cbeef09437427ae3bcaf7f308dd26a2b4e426f243a0576a4e8ecc2b3f4f1801c36e9c36c7d2ced99978ec042973db34956cc3fa57e6444d9ce7ee3ed97c788c55f2ddd8d78d68a9bd611bfaa617110a1c7ac4c9219dd87ac62382e37cda6f976feff0bd6e701b5356fa87d2db97edf49845ed467907eb12c78fd75c9c71a9993787d5c3a1370c11ab8c4d1026b4a49f86e39cc91166f626b35606548a2c58b46f4b330838baf39e66941a77d51a0ee7dcf435d5aeae54628a719c20741ee728a4670d57ba52adfd5c8b28d75657ae4a80438364ccbf1e6e01c1cffd0f2ff753dd79c621110f69aefc33d10416410984890afd3595284bfd77fa613fb90555a652f18376d016b019c151854048e08653d2d9e497d1c895cf2864af1130a5b21b290759f8aaa558fbcefdeeeaee389179a7c92ce3a8f3f3a00fd7631eae9e2307a0e45a2ecb4543625dbcd6dcede7fbfcf9d5c0eab01de040c3179eba920ab0287ae279aebb420a8631a3bab347a63c26df6cb1046cb646050227ef85fe0b6cc16e53abc29d812044fe10c0beb07d7d9d017e02f7b9ba2d363de29696c97f4d2d9535d04d4e5f84dc0933cb9e722114547161d247845851d5aa187ac309691d90ae4749051e8eab18c8071273506dd3ae35846ec22b2a0cd2794a89808ec4d99c01b9bbcabd9a96cb1e14c0549f7c899442e41a491409e03dcb5d91e036d56131d5bdc7370ec46e7352f9ed85748a4f8ae36de766e1ef01b54f7110989bc285a1c01542a9565883f7674095a50bae6b4290abe72c973b6750bad8558a1e359768e025058a672ceef3c8bbfc80e3fc6183ce20e8728f1896f73e4c849a55073318bae8df045fd8cc1c0abb0ba798b8ac650da0d4bd4f13ac5814fdcefa0360a800947ba378d73b8fe07eef2c18f8da40012e324e03a9e1cebd2cec4e9a3b280ad28fde57d9842263ea9758dc3daedb8a69a859fef1eb27d94bff8b164779e2b98443621e41b89faba7d031eb555af65eb5d59b8dc30c0aa173a7a063afe5f9070b360a480ff9373cb85fc75bb0343363607f9d83cd31b3c14a2225684b81f730f9e076ed520307a846d2e6d466fb44bc3d250b9275e56326f9e4ee1961a45cb2f4f2f1c4a1b98fed5e41774866ef4a0d06e544790f6975c684b8363da5d4020249bc56cdf83b01e963838cdd6ccb27ba2173dd5b9ab3b32a66ee2afbb68639a3b4755197b98940315749c48dcd7bdb5a06f29f80b1cdf4a8f480bacc3b4d4ad3d66c66987f63a70e7a5503e7bd3395da4fc9c15f4b6ccbdb9fb7e10edbb71be2e0e588601a48ec442c7902c93c81362403a850c908f76562270236136f475e04044c2208ba34f5ad0aefba3f5eeeb50998f0f4678bf8fea5aecebfb7e961c6b8cc09815d2a442d4f9f84685e142c6297088a380202c9266e799af65e252f8261f99550ebd12db690ca7deec3db6c964ba25ab3be71ab54dd535f4ca9decf18d56a856f10b104917bef00f7616acf770be77860b4f0ccc56266a8caf7d72ac9e60ebfa00e37aaff40e599788bdc215d97452dd6a0e2021b3eb5c0146d14412d588fde3a156a5f21277c5fdbaf7040d5c387225cb879a98af681c9595c298f007d1b1c3448d60950eb0f35165fd8eab88d6482549330bbcbf8c953ab8d06f3cafdba75ce4cc7775bbea45bb462f2d7199fb001cefbf032dee48379fe9d1e43b54fdfec875528e0c3816de30dddab27f4c411a420e057cee04ec108beb442be96b59d14946d3ec687df239efbd8b0c4a1c8e7fe5884060c13ea7b8cd3039a3c363527e7e21187242d1006d177330c00b9eb09539442d6f807018f5593353cbe251a8e0579f5761057fbad854aa204d42eceab0512331dbca505239064a64764d68341f2c16fad28087dc12e047b2c0a8e2966ac426e3fea6b49620a01c30dd4525678bb1a29a3eaaa62109b957b6859fd6b7e9a71b0fbcd861b0b6b793d53ccf3cab578e7fe710896e938f812bf4c739c06625f9643b24cd0d5a34672bb33dbed0249bb4f4cce31a42e7c553117592dadeb7097d069ff7aa2c1adce566ae82b7bcd15029887843164362d4707cb18fa9ebb417e6c38221c88b80127b0492af5fbca31f73da044fedc5ba4c4f07ce7d798e57f5f73dfd90aa2279605acd68fcca682ae705f72cdf35140647e550f84d0613ade77b0ea09ec8655123ce4e67b6b04be372c5b4e76cca511f14a94f224f1c7bd0b836c05ed75b605ca6d3c3404ca8cfad72d633d784b0b44898cee79d3aafbde0e79f5c338d4978118b78c29aaae6c88beb697149bf57a35c750cddd2fa31ff5b12c798cd4f8c7fec25d45734b802f68f0eeab22b48c49761c02cde40ccbd7db42152cd7ca376bfd9102f0e9ea1559abc6036dcdeeb28cb56e1cd14fdd91723230205b314fea705aef90c3465986853dc9abad3bc921a11f21887ec7aabeee02f072ba11310f28e5ff86a4305b1877b9d876c74342730897ed17868834e3825f4c850a6d5b0ff7a6af4f52f66fb1d5535b4eac3b5735c946834b679eaea86c57837c6b4fa5acd7d4ba621b74523a20412666ccd8cbcc6df338201a900e6f301562580cb31c561a671aaffed7b0baa765d29ff0abcb7454d9a3c645edf8a69373f830b169498b3587d15c8f88b509df22c5f08b7ce766e59d538feb9929649a75dc52f86e0da2f70a8a5a860a9b55bdaefa2a21f09d2cf474830cff4948794eda6d0221c8dead0001001448e24f18cd0385da00d3b42d2b967e1cf4793fc0570971adb859fbefc070dfde2330e8ebee4b49ff1bfa4d80f5850b2b9f56f104d83a5ca808503dad8a9bc6d2939e88a47bd7702c1ac7f860dd1146f0a3f81fda186eba798f1349acdd60d3ba6322e6cc1b9cd2d99f003e73fce167ab241d9d46ea2bb7abb5f9f67614d9b550ca297681591c04ef8009e2041bc12e336ef0f661bf929eeff553856e1ae96a4585093a618d9ff9510000000f0001002ce6af49a026c4467ec9b5000000"], 0x1154}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x70, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x2404c091)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000001680)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000016c0)=0x1, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 0:
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r0, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000080)={r0, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x4})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0xa24840)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x101, 0x1, 0x10001})
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f00000000c0)={0x5, 0xbb43, 0x7fffffff, 0xc8cca70, 0x1, 0x81})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000040)=""/98)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/67)

05:28:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0019ecad4dac75500ec1c65c373f736b2a97a6af4c9251a5efc9cc93d431e7dc254b4ced6a61e0df25a50faec6e5e11b5f6b61d0812915feede8793dd991c30ef9bf02f05020782c9d8e9efe79b723960b60fa5ed4fc9357a612dfa7e4d69621aa1a3adc8b04b1ec"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="074c8a070000208000000f544700001800650000583d65d6fa35a7f5d31414bb94040100"]})
r3 = request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='erspan0\x00', 0xfffffffffffffffe)
keyctl$revoke(0x3, r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000210060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x124, 0x14, 0x300, 0x70bd29, 0x25dfdbff, {0x1d, 0x1b}, [@INET_DIAG_REQ_BYTECODE={0x4a, 0x1, "27062d7ef3522300f863aa6d6ed7d5c1fb9ae8b6182d34e4028a7b2f6611fb92bd8afac26be6b00a0d054af481ac9c7462027bbd81f0d6ad71f7950834e6ae13a2c0d4f6b60d"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "c8a297f06b348efadfb1923d2d8bbee89666735567b9105040d4c4f4b02991ceecc70ecdf18d88887a48e4ce16bba4c10dd77a9a4191b814258ff43057826d8ac150610fa84872de84799b694368abbe3e04adddb4d4638deff568c31563f634c5b22ada6c54b8985831c9634e440f086d6b2fc9e0a784c4c30026482419eb665638fdc30e00c65ff7f05f4940f5d97e7173b664c23400c0cf1d0fe1c75b94d5515741da52fcb047949beb0b07ed68984688fdd5a6ae4649f906b342c669"}]}, 0x124}, 0x1, 0x0, 0x0, 0x84}, 0x10000000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x3b)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), r0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x9, 0x8000)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={<r4=>0x0, 0x0, r2})
ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000180)={r4})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0xa4ef, 0xbd4e, 0x401, 0x2f19868c, 0x4, 0x7fffffff, {0x2, 0x119c, 0x5, 0x2, 0x6, 0x8, 0x9, 0x2c14, 0xfff, 0x5, 0xd9e0, 0x6, 0x8001, 0xad, "14d84a2a418ccece77cab2ee59592980276cdc08295af577b1dabd8e50ec70e5"}})

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="9b7ee4550c95abd32f27c233a83dabcc5097c8c699cb694b8b80657f214ffdf9d58853ee1e9b3020e8f28cd87bc4855cbb127afc7fe468a816037d48519c0131e5e9868fcb32bead81988d44", 0x4c})

05:28:25 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431)

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4, 0x1, 0x4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x7fffffff, 0x200000)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3})

05:28:25 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
socket$key(0xf, 0x3, 0x2)

05:28:25 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x10000)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:25 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:25 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x401, 0x1, &(0x7f0000000040)=[0x7fff], &(0x7f0000000080)=[0x2, 0x3, 0x5], &(0x7f00000000c0)=[0x8, 0x3f, 0xe771, 0x1, 0x3ff, 0x1000, 0x6], &(0x7f0000000100)=[0x8, 0x10001, 0x6, 0x5424, 0x5], 0x0, 0x7})

05:28:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x58, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000e7ffffff000001000000"], 0x14}}, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r6=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r6, @ANYBLOB="78af0f149d7fcd844f57e219dd00", @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="7f0000635d5e4f66c880cc0be19e6c9e813e62f866d15fc86af9c3902e93ae43e2d704e877ceb0528e1cff4ca34bddb8a1978f0088121ba7782afa528dc0d3dc3cdccf81a916c703dd12d7a843e7c96b6c5ba6da4595f86fe4d3f890916aafdd3a7fb2c8a33522cf0ca614dc12db617cbff2c9714777243c6a6d37c0b430b9e6642a2c5b3abf340efc4b7e79679a415d7dc2d76d120e74cc6119e2855249f05159e6d429538258c8f97447f10e63ec67741d3c590b6fea38d098a6089a1ccf6e", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket(0x18, 0x3, 0x7)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1154}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x70, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x2404c091)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000001680)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000016c0)=0x1, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:25 executing program 0:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8000000003, 0x410903)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x2})

05:28:25 executing program 4:
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
syz_open_dev$sg(&(0x7f0000000080), 0x1f, 0x10000)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil})
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0xc03a, 0x8000)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000100)=[0x10000, 0x5, 0x4, 0xe0, 0x7ff, 0x8, 0x7, 0x8, 0xffffff01], &(0x7f0000000180)=[0x0], 0x9, 0x4, 0xbbbbbbbb})

05:28:26 executing program 5:
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01, <r1=>0xee00])
getgroups(0x6, &(0x7f0000000080)=[r0, 0xee01, 0x0, 0xee01, r1, 0xffffffffffffffff])
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6, 0x1})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, <r2=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2, 0x80000})

05:28:26 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x20)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x9}}, 0x18)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x98, 0x20, 0x0, 0x80, 0x49, 0x4e, 0x0, 0x0, 0x80, 0x3f, 0x8, 0x5, 0x5}, 0xe)

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = socket(0x18, 0x3, 0x7)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000001640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1154}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0xa0, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), r0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x70, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x2404c091)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000001680)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000016c0)=0x1, 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:26 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208981)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0x4040)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x297, 0x4101)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB="0000c838", @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket(0x11, 0xe8586b757f64d356, 0x4)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r5, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x100000001}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x16b0}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="070000000000000000fb08df00766a05000000d20400000000000000000000002f9078ffffffffac1e00015ee2271eea1d2c771530f681"]})

05:28:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x600001)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000080)=""/212)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x401, 0xc0000000, 0x7})

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0xfffffffffffffffb, 0x684103)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000200)=""/147, &(0x7f0000000140)=0x93)
getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x4}, 0x4)
getsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockopt$packet_int(r1, 0x107, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4)

05:28:26 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x201)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x100005, 0x10000, 0x205})

05:28:26 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x208981)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x9, 0x4040)
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x800, 0x7)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4010)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80000800, 0x8, 0x1})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r3, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x1})
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/174)

05:28:26 executing program 4:
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14, 0x80800)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x80000001, 0x80)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431)

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r3, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000100)={r3, 0x6})
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r3, 0x2})

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x5, 0x410b82)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x3, 0x7fffffff, 0x8, 0x1000, 0x80, 0x4, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x3, 0x7, 0xf, 0x7, '/dev/dri/card#\x00'}]}, 0x38)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r4, &(0x7f0000000080)={0x20, 0x0, r5, {0x4, 0x0, 0x3ff, 0x5}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', 0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000000380)={0x10c8, 0x12, 0xd02, 0x70bd29, 0x25dfdbfe, {0x23, 0x4, 0x4, 0x0, {0x4e24, 0x4e21, [0x8001, 0x2, 0x2, 0x9], [0x1, 0x1, 0x1, 0x3fc9], 0x0, [0x3, 0x1ff]}, 0x2, 0x7f}, [@INET_DIAG_REQ_BYTECODE={0x3c, 0x1, "674478a2c02c1b1179fbdcf605656b4cf8335468db0c9be0b410bd328ca49f570ac046f7b3779d4aefc674993e60ce6a5a1521c30c57be81"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "09c8e0db877cf81b1a8f754e5485f2c3ff856db51a77a814d3bb5a591be048"}, @INET_DIAG_REQ_BYTECODE={0x17, 0x1, "92ff82f27e1c0a2d58bc46991628311fe57a49"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x44801}, 0x48014)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x1fffffffe, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000000))

05:28:26 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[0x3, 0x5, 0xaf7, 0x497abef6]})
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 0:
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='^%-\'\']-{\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140)=0x800, 0x4)
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x3, 0x7, 0xf, 0x7, '/dev/dri/card#\x00'}]}, 0x38)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r4, &(0x7f0000000080)={0x20, 0x0, r5, {0x4, 0x0, 0x3ff, 0x5}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', 0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010001000000"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="07000007000089b94ebc005446000018a700"/30]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x7c, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0xfffffd17, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x108, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x850}, 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:26 executing program 5:
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x7fffffff, @empty}, @in6={0xa, 0x4e22, 0x3f, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x5, @private1, 0xfff}], 0x90)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x0, 0x1})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd4, 0x0, 0x800, 0x3, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000004)

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x7f)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000))
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fd, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000001c0)=""/236)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x6})

05:28:26 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x20000, 0x4, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:26 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x3, 0x7, 0xf, 0x7, '/dev/dri/card#\x00'}]}, 0x38)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r4, &(0x7f0000000080)={0x20, 0x0, r5, {0x4, 0x0, 0x3ff, 0x5}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', 0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x400})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:27 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffff"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x9, 0x4400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008050}, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x1})

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x3ff})

05:28:27 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x38, 0x0, r2, [{0x3, 0x7, 0xf, 0x7, '/dev/dri/card#\x00'}]}, 0x38)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000002500)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_IOCTL(r4, &(0x7f0000000080)={0x20, 0x0, r5, {0x4, 0x0, 0x3ff, 0x5}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', 0x0})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:27 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040))

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = getuid()
getresgid(&(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140), &(0x7f0000000180))
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x18041, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7ff}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1f}}], [{@obj_role={'obj_role', 0x3d, '/'}}, {@obj_role={'obj_role', 0x3d, '/}[/-'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@*'}}, {@audit}, {@obj_user={'obj_user', 0x3d, '/dev/dri/card#\x00'}}, {@pcr={'pcr', 0x3d, 0x2e}}]}})

05:28:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 0:
r0 = socket(0x18, 0xa, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20044850)
r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000))
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f00000001c0))

05:28:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3cc80003", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="800000001500000425bd7000fedbdf252a016a00010001fba8ae016d3069fe3d0531dce83374518c0149a5b87e52493a01ff4ad18e2708685a85d662e087ad1465388b1bb53604b7ea47340cd699136861e297be739c415d5eb0e60bce8f79c220c8a664fdd19a04135d9ea22d4d36edb38930734dc9b8840bdd483100000000"], 0x80}, 0x1, 0x0, 0x0, 0x4801}, 0x800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40000010)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000001c0)={'syztnl0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}})
syz_open_dev$dri(&(0x7f0000000380), 0x80, 0x2c8000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="7f0004009e38973030687c0000000b00", @ANYRES64=r2, @ANYRESOCT]})

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x100, 0x82400)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080))

05:28:27 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x410201)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))

05:28:27 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000040)={r1, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:27 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x9, 0x2, 0x41})

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r2, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000380)={0x2c, 0x4, 0x0, {0x1, 0x1f, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r3=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r4, 0x434, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffffa}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffff8001}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair(0x1f, 0x800, 0x8c3d, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r7, 0x120, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440c0}, 0x40080c5)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000280)={r1, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6d, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xffffff17, 0x80000000, 0x9})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={r1, 0x3})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000200)={0x1, 0x3, 0x8, 0x1, &(0x7f0000000140)=[{0x9, 0x8000, 0x1000, 0x8}]})

05:28:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="e899815077771b0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:27 executing program 4:
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x2, 0x2, 0xd7})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x2000002, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:27 executing program 1:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:27 executing program 3:
syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x60283)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x7, 0xffffffff})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x100)

05:28:27 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x25}}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x800)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}]}, 0x60}}, 0x4004041)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbdf250100000008000200030000003c0008802400078008000500e958713d08000600ee0000000800050063fc7a0608000500aff6e4151400078008000600430000004a920600750000002c000c800c000b8008000900fddc05321c000b80080009002379e65808000a0061b0000008000a009837000028000c8024000b801100090082f8e47c08000a00e8ac00000800090032d22e0908000a00a26f0000"], 0xac}, 0x1, 0x0, 0x0, 0x24000801}, 0x20004045)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)
sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x458185e0fbcc3838}, 0x2000000)
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:27 executing program 0:
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x101801)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:27 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x12480)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
syz_open_dev$dri(&(0x7f0000000000), 0x8526, 0x153103)

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
msgget(0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 5:
r0 = semget$private(0x0, 0x4, 0x400)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
semctl$GETZCNT(r0, 0x0, 0xf, &(0x7f0000000040)=""/167)

05:28:27 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
socketpair(0xa, 0x80c, 0x6000, &(0x7f0000000340)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$L2TP_CMD_NOOP(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x103}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="04b493fbbdae7450da99eed2b2e604fa5ddf9e417319c043cadf239a91da7bb6b585dd16653e373641d21a0fbd08b179e3028af33ae8ad06d5b4f1a4b9497c7102fe23559b23af8326967bf3450a8e989390c810e3a98f3ea48938cbb66e84e2a49574da16eb4d32be9fcea7e77803ff3c6969131eeb86df28cc4984ea5ef884182b8f74a06963c89a2d6434117cec9af36ebc72c577", 0x96})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x3, 0x0, 0x10001})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x20800)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:27 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 3 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 5:
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="d52944e058b35f5b8a76c140d9b6282bd9757253687ecbd14baa1d5cf1cbbcac2ab51f4b681c3251b67658c0c20d25a10259ad37921fbc2c21909c03eccd2520c0a8e59aa6fcf6e9", 0x48)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0x9, 0x10000, 0x7, 0x7, 0x7ff, 0x2, 0x8], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x3, 0xc0c0c0c0})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10001, 0x81, 0xd4, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[0x10001, 0x4]})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x16ca, 0x4002)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2})

05:28:27 executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x10001, 0x20800)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="67726530009740ffff00000000000000b1c5c87d28da9cec2a8f8da13e18d14bb6cdb9e35b647fc244", @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000180)=0x14, 0x80000)
sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f89b31076aacbd72ed882dacfb81528b4e22406914905b8d01133e19c0e598cb793f22f06c1279862b47e0219a7e62b98eb19d23df32", 0x36, 0x90, &(0x7f00000001c0)={0x11, 0xf8, r2, 0x1, 0x3f, 0x6, @broadcast}, 0x14)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r1})
r4 = syz_open_dev$dri(&(0x7f0000000040), 0xffffffffffff86f8, 0x319000)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430)

05:28:27 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0})

05:28:27 executing program 4 (fault-call:3 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4048051)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x400, 0x7, {{0x12, 0x4, 0x1, 0x30, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x8, [{@local, 0x80000000}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x3f}, {@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x9}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:27 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0)={0x0, 0x3})

05:28:27 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)="15cfa25b1dd33bb945b6db85504fa0ab402e675ac1653549387f5b4f00272fad7892123a1e363320440efa41cd0780315d2b907b1231c7ca3f66f8ae736dabd3b9326bf30a3eb036e1ed0f7a1c595fef904af72ade994fa00b7d2609f5eb3d6f1f4bf71f5ffd03190f8fec523aa72ab3e30915775979eb5a76b79c03ef399a1152dabb3dc632d98221cb25578d5a71b9f82d59feec5614229cbae15baa175ac2627e269dfbfac5469f560cff87d80718289005f4", 0xb4})
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:27 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x4, 0x634000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x4, 0x5})
ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x9, 0x3, 0x20})

05:28:27 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)
r2 = syz_open_dev$dri(&(0x7f0000000240), 0x5, 0xa02)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r3=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r3, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000280)={r3, 0x2})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f00000001c0))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10001, 0x81, 0xd4, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[0x10001, 0x4]})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x16ca, 0x4002)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2})

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x2, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000180)={0x401, 0x3, 0x2, 0x6, &(0x7f0000000140)=[{0x1, 0x7, 0xff, 0x9}, {0x6, 0x0, 0x5, 0x9}, {0x3ff, 0x0, 0x400, 0x43c}, {0xf247, 0xc6b4, 0x9, 0x5}, {0xfffd, 0x3, 0xfffa, 0x5}, {0x1, 0x6, 0x38, 0x80}]})
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0xfffffff9, 0x1000, 0xfff})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)=[0x3, 0x7, 0x3ff, 0x2, 0x6, 0xfff, 0x4], 0x2, 0x3, 0x6, &(0x7f0000000080)=[0x2, 0x1, 0x1], &(0x7f00000000c0)=[0x7, 0x9, 0x1f, 0x2, 0xcf6a]})

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x40004, 0xfff, 0x1})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[0xb2, 0x2, 0x7]})

05:28:28 executing program 0 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x1ff], 0x2, 0x7fffffff, 0x6, 0x1ff, 0x0, 0x2, 0x3, {0x1, 0x81, 0x5, 0x297, 0x9, 0x8, 0x5, 0x1, 0x2, 0x6, 0xffda, 0x4, 0x4, 0x3, "b7ef9f2765ba3ea58242ab4b0d04d221e8e2e350861051549b952e7e8a70a58c"}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x90, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0x260000, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x2400d011}, 0x20040095)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
r3 = accept4$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x100000)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6}, 0x10)
ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000140)={0x0, 0x3})
connect$packet(r1, &(0x7f0000000040)={0x11, 0x1a, 0x0, 0x1, 0x5, 0x6, @remote}, 0x14)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000040)="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", 0xfe})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:28 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, &(0x7f0000000040)="fbe5e18dd02892c3631b7d84b129585bc7c63edc1f0000001fc2f8631fa663463cce821d024288123242ee6e6f84b9faf533e957987232ee4c61c6610ecf876fbe53c7d0c743287329cdf3a928a6ee8d03169c264e985703459b8045ac1e22e53611da93dd26f5af3b301e08c9492516bd215fd6a8", 0xffffffffffffff05, 0x93720d04758ecc90, &(0x7f00000000c0)={0x11, 0x93, 0x0, 0x1, 0x4, 0x6, @local}, 0x14)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x8000, 0x8000, 0x2, 0x6, {{0xc, 0x4, 0x1, 0xc, 0x30, 0x68, 0x0, 0x1e, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0xad, [@private=0xa010102, @loopback, @remote, @remote, @local, @remote]}]}}}}})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000001c0)={0xffffff23, 0xfffffffb, 0x0, 0x3, 0x10, 0xae})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x700, 0x1, 0xfffffffa, 0x10001, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x4, [{@broadcast, 0x1}]}]}}}}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 3:
semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000080)={r3})

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
semctl$SETVAL(0xffffffffffffffff, 0x3, 0x10, &(0x7f0000000240)=0x4)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x400000ff, 0x8000, 0x4, 0x0, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x7, 0x0, 0x10001})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = add_key(&(0x7f0000001780)='big_key\x00', &(0x7f00000017c0)={'syz', 0x1}, &(0x7f0000001800)="5673cff8736a84cb9c7ad8cea8368b0eddb2ce8010781e10294da71dce586b7bfc7c1e69c4c42bf67d5826f6f7d88332df7b5a00bab775fcdf7888491b37f9185d7a9db308f26daaf7f20f9aa75f1610d6aaa8f8b59fcc87d45acf7ff213f8ee2254001b8b666b447c92b0a18b727ba9c8dc0bb7a69d2c4f3c64d73ccd256e33b24b42245152ba82e6e7ded9d47a3362d54e8da1ddff01bae76ee594bb41928b38f713a8499f530d2e1c07feb74361a83ede921dfcf55ea2b75c3428e482b3232205378289029756130a5fb3f3816bf444f01c4b71c6e29248aa5b8e13f86fa1137abdd3b8b9d6309dafa3", 0xeb, 0xfffffffffffffffd)
add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @desc1}, &(0x7f0000001700)={0x0, "e32faf5fc56b5c6a28eaaca7bdba703a5ec9d293911ca896a4859725d702dc499e192a1061e74d883de8354351d45e91555506392ef7a2205b50c4e73a00ee1b", 0x27}, 0x48, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000000000000000004733abd143", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34130000130001002cbd7000fddbdf252c3f81034e204e244000000001000080090000001a00000005000000040000000600000005000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1334}, 0x1, 0x0, 0x0, 0x10}, 0x10040800)

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={0x0, 0x6})

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x40, 0x9, 0x5, 0x5, 0x9], &(0x7f0000000080)=[0x0, 0x0], 0x5, 0x6, 0xc0c0c0c0})

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r2, 0x1})

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3b0000000000000003000000000400002bb8f120791cfe84309b1022f6d7366067a901afded5c571ddebaf2d6a2bbe7ecfb407c9de2f1bcf2e767a2c0e98fb198ff7b35eb4da532d536dcdd0c4bf44226b9db629f8fce3250428f26514b8d35af187c7650b9e7ef86ceaa40d452dd83225e8e4729849e2756f04000000a560929ea03b63e0ffc6763252db949c539283f8abbc1c959aa1faf98e246b726522aff5296d076f981bc203df8429c253021c1d430dc006a173e63c50bf55181ba6f840c9988a6165aa15b4ed53d5e08aba6961daf6187e4739d83eeee9b81a5c4e89c3", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x3fc, 0x302c0)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[0x8, 0x7fff, 0x98bb, 0x10001, 0x9], 0x5, 0x5, 0xfffffff7, 0x0, 0x8001, 0x80, 0x1, {0x800, 0x7f, 0x8, 0x9, 0x3, 0x7f, 0x7, 0xddad, 0x6, 0x4, 0x8, 0x0, 0xffff, 0xb7, "e48da5ada3903d961abf73f3cd7740e6b1bf80151361d0e88189e4e71a53b6f7"}})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7f, 0x4a2], &(0x7f0000000080)=[0x0], 0x2, 0x81, 0x2c2c2c2c})

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x40, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xe)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x0, 0x0, {}, [@L2TP_ATTR_LNS_MODE={0x5}]}, 0x1c}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000007c0)=ANY=[@ANYBLOB="677f653000000000000000000000000055facd6cd6acb75d04078ce3e789645db71a7de233482ea4d74bfeb59a8ee5d2218971a3d4513235d76792f6549362a3fe2f6d63dd3578f76408958a0c7bde67a8cabb1c1fb121eb34e9f72489c5193440463641f8390070802f5b07800ff9e1a7db1ac8e0b0b5b6b7b7fd2cdd1d5d67b88a846b263800f8376b420774ad41256821019c5323678d4d8d2eb4dc1e9b87bfc6c2274be135159b0854a68f2280cce37cf937e3a1521064354da5f5c10919578c79ecac21", @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
getgroups(0x3, &(0x7f0000002800)=[0xffffffffffffffff, 0xee01, <r5=>0xee00])
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000002840)={0x78, 0x0, 0x0, {0x401, 0x400, 0x0, {0x0, 0x9, 0x20000001, 0x4, 0x2, 0x428, 0x6, 0x5, 0xa00, 0x2000, 0x2, 0x0, r5, 0xfffffffc, 0x65}}}, 0x78)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r6, @ANYBLOB="000427bd7000ffdbdf250600000008000300060000000800030006000000080002000800000040000180"], 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000580)={'ip_vti0\x00', <r7=>r2, 0x10, 0x7800, 0xd3, 0x9, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x81, 0x4, 0x0, @broadcast, @multicast1, {[@ssrr={0x89, 0x13, 0x63, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xdc, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x810)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_hsr\x00'}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x80}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x13}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
syz_open_dev$dri(&(0x7f0000000000), 0x2005, 0x0)

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 5:
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000080)="b17c8bcd9ed0f7d6b74f8262c6fcde710b15e1512d0e9a6c3a19466caad420062f76db5e9e1ea07edbc93333275951519e835c97f48239e501cc373eb14f359dd80c154922564ea7ed0d88b879ee2746560c9a1a1205aab94d391e01d9e1b49151283c91dc147f20b488284c6cc58c2ecc4f2d028eaff1fc27dfa4197095d7247a18d1ed85edd47bd21f4f032fd139a15e810b0de8cfb42510b4d07bec49", 0x9e})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xff, 0x4, 0x10000001})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x2)
syz_open_dev$dri(&(0x7f0000000000), 0x9df7, 0x604003)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x200000)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffc, 0x95, 0x1, @buffer={0x0, 0xd1, &(0x7f00000000c0)=""/209}, &(0x7f00000001c0)="7a7584c30ebe88bce7a6e9bf77eef5eb5d03ea9a6bf65acc503691a1161453799b16aaa7f4ef71f332ce8c85dc61583df74054b38e57e63ea7e7f4835ce571b658f83ba1e62dfcb88ef0372445ed09d4962ca930707c67bfa83dabc094f9864a704ed43b57f6ab2f05279312292ba2e8ae16917a1586a6d2edb47932ea286f60b257bb5432028037197e932e49496aed9fbc3fedbb", &(0x7f0000000280)=""/77, 0x2, 0x10002, 0xffffffffffffffff, &(0x7f0000000300)})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3b0000000000010000800000000000a4735aa597e21650891010d8528e5b1fc1afc6bfe338c56eea76eab90bba0a00"/66, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x200440)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x800, 0x5a06], 0x2, 0x3f, 0x0, 0x10000, 0x7, 0xa10, 0x1, {0x2, 0x4, 0x3, 0x7fff, 0x2, 0x7f, 0x1ff, 0xbcf, 0x3b9, 0x5, 0x8000, 0x3, 0x3, 0x1, "7885921da9efdad75d647e379b9a55a25708395169836a9793f4e30c5bbc0058"}})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000140)={0x20000000000, 0x0, 0x1})

05:28:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000013", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x4c8, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x2f, 0x80, 0xa2, 0xa, {0x4e20, 0x4e21, [0x1, 0x386, 0x8, 0x6382], [0x6, 0x401, 0xfffffffc, 0x800], 0x0, [0x8, 0x28bb]}, 0x10001, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "669997152e7f0eca0937c19c281cc4c1ce5bbcc9b9ba2c6fa94189efcb9bb89582ccf07b5e1110653a746dd29eb710365aa5afa271fbedd152b9788e42f8c568750a"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "d82fb7a4fc736cf576c026806d1831f52610fcb8e99166ca23d3c5e8e6dd09a17f0f71d09d85997ef40cd129c751dc2470bd74686d2327357833e49a581a144223086f25db0b926aca8d0bdbcdeddf3870a9e145fbe4d0ccad8365194c04da326b5ce2686491bfc5d566c740ce474b7dea86e48c2a0de6a76924f07678524aaf5f9469576dfc90a0d8506671c2022e"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "9f27baaeb61d7e8ad36a60c52c55e2582272939b500203d0d6f69e57ffa8b12f1cdab5136ac40b9ebd3c7aa8e4bd1a03e60a31bf0ab8e944e663a4d46a92a91f2cde52a7f252ed73cc939026c7cacdb8cba32c2d2af0072fffd6e4f18e5634322a02a90eed0e404622e926c33bc604d3fee24841a044f7333802a96834e3a1cdadd6852b32f9c4b8513e00092b18acb3559e24b0a5bc55a2cee9d31b7ab0f5255e43eb20e3e3956992e2d231b0dc38ba580e6a48dd6add0307b437ed0ba8814f30a20f7cc03ccf6ce82e7c6c3f5ac1cee7dce1a132d141fe4c"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "52dbd5ded2ec893101617d1b908ecafab316c125a9b6e346f385871450e5318e6cc8f7cc3f671b9365ca5fa516fde774f3b7f954db011ce691233c01a45da2593eb22a420ba619530e6e4228e6ec16515fefa19b794903ed11e980d2805384a2197e18450b6bc2a2a6a07e5cba850399cb27e537cd84d18ae174a4518cf1268f477246c0c41272739fefc8f547cf644f4949544d9bb14d2acac95813b38cf5"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "d9b6727742030ce029d00cbd916ea4e0e7fbb27fe4c1e742921be4476ceb20f1a1201b66b3332347884c4ead36959d90cf8555905764358ba93f1e3180c08475c39e663946968d66a5b0a4f4bc2619cfa240a9e89edd558d69f8435334b1ffb4661ab71e07ed3802568f3d24ec5ac9eaa4165083dd85eed804f6371eda4b39588d503c6108c7ab1cc00b0d99fe33c1594b43e8814503d04ff742e259c383a6d7401b69ea6c56a85e86c506eafd78ffa8d2e7e89a5aec2daecb78415f46960bc069bf7b405c98e066e9aaf29eaa1ff09571dd84a5d59009779bc5dc38f3e194edeb02"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "e1d47fb2ba06e110c6164349958d20f5ef81946b24ff67b85fbcebe8064301f770a6f8fc96b501539ac2fa58dbe7d77772d2f0399ce4169632d46e7f1275e8ae0d60d3afeb98184be1a9501a3d9825b29ebc7f78afe0a48a9f10cb78797d277052ae121d13c80224b9bbd29e3bf0fec149467e52cb41514bc966f9fb26"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "99f25962a571bcbd8508db08b2b24cb59b67d77aacce3a7fe365b0b69fb53db0902d459417c36b5443163fb4b7c4415a3e3c0daf81961bafd1b0c16f10a9b910c935a425d8a88219b5a35f3b67fe2618e2bfdb4bec3204e84918757cbc79c52b57216b3fc1a3b0b200c770e9c6987717bb96765f58b105424f057aa6065e0fb8943147bc960ad1947f9a4e78c61f3a1332dcfc12882a1a24b18cbd730c0b41e0830dc078b0bb4dced469d8c4"}]}, 0x4c8}, 0x1, 0x0, 0x0, 0xc4cd97771b7d7756}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket(0xa, 0x6, 0x1)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
connect$caif(0xffffffffffffffff, &(0x7f0000000440), 0x18)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
syz_open_dev$dri(&(0x7f0000000040), 0x10001, 0x40100)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000280)=""/130)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x755c02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 5:
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x0, {0x0, 0x6}}, 0x20)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
socket$caif_stream(0x25, 0x1, 0x3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000140)=[0x76a, 0x2], &(0x7f0000000180)=[0x5], &(0x7f00000001c0)=[0x3ff], &(0x7f0000000200)=[0x401, 0x4, 0x401, 0x20, 0x0, 0x4, 0x5, 0x1, 0x7, 0xffffffff], 0x0, 0x7f})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000300)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000003c0))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, <r4=>0xffffffffffffffff})
syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000380))
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0xf62, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000340)={0x1ff, 0x2, 0x4, 0x6, &(0x7f0000000280)=[{0x4, 0xfff7, 0x98, 0x56da}, {0x4, 0x100, 0x0, 0x7f}, {0xffff, 0x4, 0xc9, 0x20}, {0x9, 0x5, 0x401, 0x2}, {0x8, 0x2, 0x80, 0x7}, {0x0, 0x2, 0x8, 0x5b}]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RM_CTX(r7, 0xc0086421, &(0x7f00000000c0)={0x0, 0x2})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000})

05:28:28 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x401)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0005f20114fbd54ad2d94a9d140ee60bda0000002a19145371000000ace7a27a", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0))
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
write$input_event(r3, &(0x7f0000000100)={{0x0, 0x2710}, 0x14, 0xfff, 0x200}, 0x18)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000340)=""/187)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4)

05:28:28 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xfe, 0x8000, 0x3f})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="05612cd0e17bff7250590793daf1f116bf7871be94dd98bb88f8e9b1083c83771cb9246e54c0961b01bca3952ba9a8efe5efe5c96ec98ed10360b6b9a199daf586bc44c68865468eba76dcdaf408aa9fd84ccfc29b4964a89ed8fa016575893a777dca05d4effeb4a3f18a3de7a2b7a0196003b80414c485d48835733ed5383c9ca8f2d0ba1b5fd5eb0fc918efc2f7c76913ec9498c943fead45fed732ff82c91d6b4e1c0885906f2a29a3815f008a7d3d52699f4705b86917cecc", 0xbb})
r2 = semget(0x0, 0x0, 0x342)
semctl$IPC_RMID(r2, 0x0, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)=[0x1])
r3 = syz_open_dev$sg(&(0x7f0000000200), 0x2, 0x400000)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000140)=""/192)
semop(r2, &(0x7f0000000240)=[{0x3, 0x401, 0x800}, {0x1, 0x5, 0x400}, {0x2, 0x0, 0x1000}, {0x0, 0xe000, 0x1000}, {0x0, 0x1ff, 0x1000}, {0x1, 0x93d4}, {0x3, 0x1000, 0x800}, {0x4, 0x7, 0x1000}], 0x8)

05:28:28 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil})

05:28:28 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x0, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:28 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1d)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080))

05:28:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6772000000000000000000000000c21a", @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544e00003800650000582f907864010101ac1414bb44046e1144140b200000000000004e3cffff800070000000000a6a1dd19805fca0410000"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="3b0000000000000000000000001c0000742b2db798b707a94e3eb043adeb81fdffffff935f382057548c254a0c004f9eaf876bd62baef46fee27dcff32a97c59bac38d957df999d684c76d751e7d2995817f565845a78b5bdc3527d2fb82ec95274555107c399e689cf64ecf296b209d5e9add1f514254ec98229bef835930534d91d9531f000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/202)

05:28:28 executing program 3:
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x4000)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0xf8, 0x2000007f, 0x803d, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000003c0)={0x3f, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fe00002, 0x27, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000100)={0x2, 0xfff})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000280)=[0x7, 0x4fb700, 0x3, 0x5, 0x4, 0x1, 0x8, 0x1c, 0x4f7, 0x3], &(0x7f0000000340)=[0x0, 0x0], 0xa, 0x3, 0xbbbbbbbb})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={0x0, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080))

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
keyctl$revoke(0x3, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)

05:28:29 executing program 5:
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x800)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xa1e, 0x2a0000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fc, 0x4, 0x7})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000040)=[0x652, 0x25, 0xfffff800, 0x29b, 0x20, 0x1, 0x2], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x401, 0xb0b0b0b0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x408100)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000080)={0x1, {0x7, 0x800, 0x400, 0x0, 0x40800, 0x6}})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430)

05:28:29 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket(0x3, 0x1, 0x80000000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf8}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x78, r3, 0x200, 0x70b927, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x16}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000100)={0x601, 0x6, &(0x7f0000000000)=[0x6, 0xfffffffb, 0x8, 0x5db, 0x4, 0x6a0c8aea], &(0x7f0000000040)=[0xfffffffa, 0x40, 0xede, 0xfff, 0xab4], &(0x7f0000000080), &(0x7f00000000c0)=[0x1], 0x0, 0x7fffffff})

05:28:29 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x6], 0x1, 0x5aa, 0x20, 0x80, 0x9, 0x6, 0x0, {0x9c, 0x401, 0x3f, 0x0, 0x0, 0x2, 0x4, 0x1, 0x81, 0x9627, 0x5, 0xcc67, 0x3f, 0x2, "a6c910be1dc77b62efdf8d2d0bc0c39e0b388c68639df19c18a072621450a9d0"}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})

05:28:29 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = socket(0x1d, 0x80008, 0x3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf25020000000800020006000000080003000000000504000180140001800800070040c42ef93e6e6a99ffff73a7182772db808549b4d995cc631f94fd1d7fba7ab369f437c9d3846b404ed8017d423a06bbf3305bf5092519a5a1b99dab6190f908efa763f8d5b8000082a043cd87a4e42b8f35b1a3fb7140620220c768a3ba38", @ANYRES32=0x0, @ANYBLOB="060005004e2400000800020004000000"], 0x44}}, 0x9bfad3cd41b189ad)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x400, 0xc20)
ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000100)={0x1, 0x1, 0x1, 0x2, &(0x7f00000000c0)=[{0x5, 0xa08f, 0x20, 0x40}, {0x40, 0x0, 0xffff, 0xffff}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:29 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1f)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000000)={r2})

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ffa8000800060000000000140086826ffd6f916500"/36], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket(0x3, 0x1, 0x80000000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf8}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x78, r3, 0x200, 0x70b927, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x16}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x4, 0x80000000, 0xff, 0x9, 0x1, 0x8})
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8004, 0x7fff, 0x103f, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000100)={&(0x7f00000000c0)=[0x9, 0x0, 0x1f, 0x8, 0x41e668b3, 0x1, 0x4], 0x7, 0x9, 0x200, 0x2, 0x7fff, 0x0, 0x40, {0x85, 0x8000, 0xffff, 0x2, 0x0, 0x5aa7, 0x0, 0xffff, 0x3, 0xfffd, 0xff, 0xf3, 0x72bbf28b, 0x8, "f93d681f85ca38b93b60549ad0029a7ecc1d892a1b1b6db8aed97acd1e5e2d1b"}})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x38, 0x400})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

[ 1834.069649] can: request_module (can-proto-3) failed.
05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

[ 1834.110125] can: request_module (can-proto-3) failed.
05:28:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010200000d0000000000000000005137a3433c261be3029affee72bfcd397abea1b97133516e3f732b1a9caad3ae5558a6500c22456d2f35e91a9fa7a3593ed1f4a934c6bf2e52b6045d8e2f647e37d75b4701a8cd064ae12cf53cd4c24a5718c30563c552b81f98663f1953f867edd5c28cba3cd6a788a189a9fbdbe75d44b97438cd32487f607a77effec888f3f2a157ccffd00548733d876c34a25507bf64d4c9b2db9ca11b944c630ccd8ad6a5c8b1e7dcb43de8e47cb0124b40a1496eeb636d9977cd7888f17fcad8d305e6bb"], 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8805}, 0x8000)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/158)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f00000001c0)=""/244)

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000440), 0x0, 0x2d0141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000000)=""/86)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x4, 0x7, 0xa2, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000240)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x0, 0x8000, 0x3f, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r4})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x401, 0x101083)
ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, &(0x7f0000000100)=0xfffff800)
semtimedop(0xffffffffffffffff, &(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f0000000140)={0x2})
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x3, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000380)={&(0x7f0000000340)=[0x7fff, 0xf1], 0x2, 0x76dc, 0x0, 0x6, 0x7ff, 0x92, 0xffffffd8, {0x100, 0x8c, 0x9, 0x3, 0x7, 0x2, 0x100, 0x8, 0x471, 0x0, 0x3, 0x0, 0x100, 0x8000, "78a8e827973768311e308b6831aeee6d68feca091cedf4eca425bed588341520"}})
r7 = syz_open_dev$sg(&(0x7f0000000080), 0x100000000, 0x8002)
ioctl$BLKTRACESTOP(r7, 0x1275, 0x0)

05:28:29 executing program 5:
shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x3000)=nil, 0x4000)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0xf8, 0x2000007f, 0x803d, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f00000003c0)={0x3f, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fe00002, 0x27, 0x80})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000100)={0x2, 0xfff})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000280)=[0x7, 0x4fb700, 0x3, 0x5, 0x4, 0x1, 0x8, 0x1c, 0x4f7, 0x3], &(0x7f0000000340)=[0x0, 0x0], 0xa, 0x3, 0xbbbbbbbb})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000140)={0x0, 0x2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)={r3})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f0000000080))

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
setsockopt$packet_buf(r4, 0x107, 0x14, &(0x7f0000000640)="fa4f613f4726149630dbd07521382b20584af17083b0e3704d1ea4d0bd5d783233b8c1ac749c9c0bc2f871cf1360b8dc206a00edbb3cacd4efa423e2bb611ff16c79314b0a1ecaa99af950c399bc8f50d02e0fafdd383c455cb0438fbaeac67992ded6c1a87b8ed4afe62452a3e037fa236d37af455bac8bc52346606bc0e64efbcef38dfb2e07be5ab27d425c9a2fd054f72dac19f3dedf725b6b1abce98bce391f9b482f5fa16d02acd2265d2fbd2ce8eae3f3b2ae27e9653ec2bfea828562be7be3019ca329fe58d1251889360dc09569", 0xd2)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000de5450db2a8157fdfba640dd7691db14b3de6496c4a00e48a537925f53213274e736707a1e18edd671b5730027ca06ce5190c9431f124fe01e96b4cf1e91bd8e0db2b484c2a6e5f0d6d71a0e868ae63078496d214e49f239b976a9b758331919cc9c4d975c655380cb47dda6ae64046158bdd59054d0cb1c16e4cc3f40e5c8cf89d7a2aa6457480ce5e7cde8dede77240fa675c768ee95e53ed8072a57e73d657cd647a3", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), r0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x56}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000240)={0x5a5})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ffa8000800060000000000140086826ffd6f916500"/36], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0xffff8001], &(0x7f0000000040)=[0x0], 0x1, 0x80000000, 0xe0e0e0e0})
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000000c0)={0x7})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffa000/0x3000)=nil})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
syz_open_dev$dri(&(0x7f0000000040), 0x921, 0x200242)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:29 executing program 3:
keyctl$revoke(0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000013", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x4c8, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x2f, 0x80, 0xa2, 0xa, {0x4e20, 0x4e21, [0x1, 0x386, 0x8, 0x6382], [0x6, 0x401, 0xfffffffc, 0x800], 0x0, [0x8, 0x28bb]}, 0x10001, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "669997152e7f0eca0937c19c281cc4c1ce5bbcc9b9ba2c6fa94189efcb9bb89582ccf07b5e1110653a746dd29eb710365aa5afa271fbedd152b9788e42f8c568750a"}, @INET_DIAG_REQ_BYTECODE={0x93, 0x1, "d82fb7a4fc736cf576c026806d1831f52610fcb8e99166ca23d3c5e8e6dd09a17f0f71d09d85997ef40cd129c751dc2470bd74686d2327357833e49a581a144223086f25db0b926aca8d0bdbcdeddf3870a9e145fbe4d0ccad8365194c04da326b5ce2686491bfc5d566c740ce474b7dea86e48c2a0de6a76924f07678524aaf5f9469576dfc90a0d8506671c2022e"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "9f27baaeb61d7e8ad36a60c52c55e2582272939b500203d0d6f69e57ffa8b12f1cdab5136ac40b9ebd3c7aa8e4bd1a03e60a31bf0ab8e944e663a4d46a92a91f2cde52a7f252ed73cc939026c7cacdb8cba32c2d2af0072fffd6e4f18e5634322a02a90eed0e404622e926c33bc604d3fee24841a044f7333802a96834e3a1cdadd6852b32f9c4b8513e00092b18acb3559e24b0a5bc55a2cee9d31b7ab0f5255e43eb20e3e3956992e2d231b0dc38ba580e6a48dd6add0307b437ed0ba8814f30a20f7cc03ccf6ce82e7c6c3f5ac1cee7dce1a132d141fe4c"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "52dbd5ded2ec893101617d1b908ecafab316c125a9b6e346f385871450e5318e6cc8f7cc3f671b9365ca5fa516fde774f3b7f954db011ce691233c01a45da2593eb22a420ba619530e6e4228e6ec16515fefa19b794903ed11e980d2805384a2197e18450b6bc2a2a6a07e5cba850399cb27e537cd84d18ae174a4518cf1268f477246c0c41272739fefc8f547cf644f4949544d9bb14d2acac95813b38cf5"}, @INET_DIAG_REQ_BYTECODE={0xe6, 0x1, "d9b6727742030ce029d00cbd916ea4e0e7fbb27fe4c1e742921be4476ceb20f1a1201b66b3332347884c4ead36959d90cf8555905764358ba93f1e3180c08475c39e663946968d66a5b0a4f4bc2619cfa240a9e89edd558d69f8435334b1ffb4661ab71e07ed3802568f3d24ec5ac9eaa4165083dd85eed804f6371eda4b39588d503c6108c7ab1cc00b0d99fe33c1594b43e8814503d04ff742e259c383a6d7401b69ea6c56a85e86c506eafd78ffa8d2e7e89a5aec2daecb78415f46960bc069bf7b405c98e066e9aaf29eaa1ff09571dd84a5d59009779bc5dc38f3e194edeb02"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "e1d47fb2ba06e110c6164349958d20f5ef81946b24ff67b85fbcebe8064301f770a6f8fc96b501539ac2fa58dbe7d77772d2f0399ce4169632d46e7f1275e8ae0d60d3afeb98184be1a9501a3d9825b29ebc7f78afe0a48a9f10cb78797d277052ae121d13c80224b9bbd29e3bf0fec149467e52cb41514bc966f9fb26"}, @INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "99f25962a571bcbd8508db08b2b24cb59b67d77aacce3a7fe365b0b69fb53db0902d459417c36b5443163fb4b7c4415a3e3c0daf81961bafd1b0c16f10a9b910c935a425d8a88219b5a35f3b67fe2618e2bfdb4bec3204e84918757cbc79c52b57216b3fc1a3b0b200c770e9c6987717bb96765f58b105424f057aa6065e0fb8943147bc960ad1947f9a4e78c61f3a1332dcfc12882a1a24b18cbd730c0b41e0830dc078b0bb4dced469d8c4"}]}, 0x4c8}, 0x1, 0x0, 0x0, 0xc4cd97771b7d7756}, 0x20000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r2 = socket(0xa, 0x6, 0x1)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
connect$caif(0xffffffffffffffff, &(0x7f0000000440), 0x18)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000340)={&(0x7f0000ffb000/0x3000)=nil})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x3c, 0x9})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x5, 0x20, 0x7, 0x4000, 0x5], &(0x7f0000000180)=[0x0], 0x5, 0x10000, 0xc0c0c0c0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0x7ff)
r1 = syz_open_dev$dri(&(0x7f0000000100), 0x7ff, 0x400)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000000000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff00000800060000002b9ea500001400040000000000040000000000000000000001060005004e"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r7=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, r8, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1db7c8f6}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa322}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11515292}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ab93623}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5eac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4859082b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4cb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d05b5d1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa6d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bb4aecd}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5524ebe6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1564}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55bdc2d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cd58bb4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3caa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cd6a165}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x74, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36e1e3f7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x665bd54e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e2bc2df}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f8818ee}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2548}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62896fa9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bd8915a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c74ee9}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

05:28:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x802, &(0x7f0000002300)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x65, 0xb33beb768ba6e2c1, 0x36, 0x62, 0x30, 0x37, 0x37], 0x2d, [0x31, 0x31, 0x61, 0x33], 0x2d, [0x32, 0x348221fb27dfd32, 0x66, 0x61], 0x2d, [0x36, 0x66, 0x66, 0x36], 0x2d, [0x5, 0x33, 0x31, 0x30, 0x37, 0x30, 0x62, 0x65]}}}, {@obj_type}]}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)=ANY=[@ANYBLOB="1000af1a7619fd357b6db266d99fc41f5cae21349432e82dcd4ca54b78a6221e478f1fdb7a10cca7e1ff0f867eb1f39a838a965968f1774be96df618c04f71106d14be04393769a913df880941f5bfaa766c8c7052831390f33010c6888b6e563d116e3dd142", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}]}, 0x34}}, 0x0)

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x800000008000000, 0xc21608fd396088a4)
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x1, 0xffff7fff, 0x4, 0x5, 0x6, 0x401, 0x5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:29 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x8, 0x1})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140)=[0x8, 0x7fff, 0x98bb, 0x10001, 0x9], 0x5, 0x5, 0xfffffff7, 0x0, 0x8001, 0x80, 0x1, {0x800, 0x7f, 0x8, 0x9, 0x3, 0x7f, 0x7, 0xddad, 0x6, 0x4, 0x8, 0x0, 0xffff, 0xb7, "e48da5ada3903d961abf73f3cd7740e6b1bf80151361d0e88189e4e71a53b6f7"}})
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7f, 0x4a2], &(0x7f0000000080)=[0x0], 0x2, 0x81, 0x2c2c2c2c})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0xffffff77, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:29 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r2, 0x1})

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0)

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000040)=""/166)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040))

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdba531f5fc00000800030006d74ac8601e4acc226f01a7b4279c01000000080003000600000008000200060000004000018008000200", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="0600050003ff000008000600000000001400040000000000000000000000000000000001060005004e230000"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:29 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280))

05:28:29 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:29 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r2, 0x1})

05:28:29 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0xfffffffd, 0xfffffff8})

05:28:29 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240)=[0x80000000, 0x6, 0xffff, 0x400, 0x1f, 0xfffffff9], 0x6, 0x7, 0x8000, 0x1, 0x6, 0x5, 0x400, {0x400, 0x6, 0x9, 0xfff9, 0x1000, 0x2, 0x40, 0x0, 0x3, 0x2, 0x1000, 0x8d0, 0x8, 0x50, "7e2ed4d10d485355c72de870886fb08d37db601281c3dda6c5be1d0e8059bc0d"}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f00000001c0), 0xfff, 0x509501)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x40)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="501da19b7e3850338339eae239ceb5689e480e071a8f80b9776d438cc55a28d2f6167bf1f027de11effbc49d740424913db80c304ad0a30821557ad23d7de90d1c5e6f3a0e06dbdbad71d58cd6f0041bed19653b375690e9be9ee21062c06330975fb33ac06a65121cbb2b15ab215f3906887d52dd7f674a936dae82515c21cbb1441e9567e793d0032e1015337317621aa7b71a4c29588f106e21a8ba2c31", 0x9f})

05:28:29 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="677265850dcd8ae8196b9f000000000026a0ddd209d1b80f8ce21d809e20fa88738f772e4e7c6df7092a8c51406d30ad5074f7a8be176e53b427b5bafd3ec124ec326718a776cdbc6542de5fd86e6274ea2a6ac109873a62469248cfe27ef2d03f998ebacadc3254b75fe4f0c73c8e2f93953ae717695db15ac6d3dc8d76a2601df57cc00aa3c313e89e2b03f9a72f72a09d558a83d25a676198ed9444f812f606369c9badaf628f2816c52eca080c794e5176fd0ed7c2188520317491621a4e5a1c2bd8c239ed3008c200", @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000040)={r2, 0x1})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xa0bb, 0x0, 0x10001})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x1, 0x7, 0x2, 0x0, [0x0, 0x0]}}, 0x2a)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={0x0, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3b11000000000000000000dc05293f6c", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x5})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x3, 0x101200)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0))
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000100)=""/96)

05:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000340)=0x3, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:30 executing program 4:
socket$caif_stream(0x25, 0x1, 0x2)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x40400c0}, 0x4001)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000400), r1)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:30 executing program 0:
r0 = getuid()
read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f00000000c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x2, 0x2, 0x1, 0x3, 0x3, 0x2, {0x5, 0x7, 0x401, 0x3, 0x4, 0x10000, 0x1f, 0x1, 0x27, 0x2000, 0x80000000, r0, r1, 0x5, 0x4}}}}, 0xa0)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080))
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x2, 0x5})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000080)=0x1)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r4})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000000)={0x0, 0x7, 0x5})
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000100)={0x2, 0x7ff})

05:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'erspan0\x00', &(0x7f00000003c0)={'erspan0\x00', <r3=>r2, 0x0, 0x8, 0x0, 0xa8, {{0x23, 0x4, 0x0, 0x13, 0x8c, 0x67, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@ssrr={0x89, 0xf, 0xc7, [@multicast1, @private=0xa010100, @local]}, @generic={0x86, 0xa, "76ea61ee8f66128f"}, @ra={0x94, 0x4}, @cipso={0x86, 0x17, 0x3, [{0x6, 0x4, "fe41"}, {0x5, 0xd, "529305f2e3da086d90ac31"}]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0xc, [{@broadcast}, {@broadcast, 0xaf}, {@empty, 0x5}, {@broadcast, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x27}, 0xe09}, {@private=0xa010101, 0x3f}, {@broadcast, 0x200}, {@rand_addr=0x64010102, 0xe5}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xa8, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, <r2=>0xffffffffffffffff})
syz_open_dev$dri(&(0x7f00000002c0), 0x612, 0x10000)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000240)='syz1\x00')
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3b00f83c9cb30000000000000000000021000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000004c0)={'syz1\x00', {0x200, 0x1, 0x2, 0x4}, 0x2b, [0x81, 0x5, 0xfff, 0xe, 0x50, 0x6, 0x4, 0x7, 0x4, 0x2, 0x7, 0x0, 0x1, 0x9, 0x1, 0x3, 0x401, 0x7, 0x1000, 0x200, 0x8, 0x6, 0x1, 0x9, 0xfffffffe, 0x3a9, 0x45, 0xffff, 0x101, 0x800, 0x1ff, 0x4, 0x8, 0x1, 0x4, 0x7, 0x5dc3, 0x3, 0x9, 0x7f, 0x10001, 0x0, 0x6, 0xf6b4, 0x9, 0x80000000, 0x10001, 0x4f336c2b, 0x6, 0x1ff, 0x6, 0x7f, 0x5, 0x8, 0x9, 0x80000001, 0x40, 0x2, 0x24000, 0x6, 0x6, 0x1000, 0x8, 0x7fffffff], [0x6, 0x0, 0x59, 0x44d9, 0x7, 0xd9, 0x41, 0x7, 0x1, 0x3, 0xfffffffa, 0x7, 0x43ac6bd0, 0x0, 0x9, 0x4, 0x6, 0x4, 0x7, 0x8, 0x7f, 0xf866a1ed, 0x3, 0x5, 0x4, 0x5, 0x0, 0x594, 0x7fffffff, 0x0, 0x8, 0x9, 0x9, 0x7, 0x5, 0xff, 0xa, 0x7ec, 0x200, 0x80000001, 0x6, 0x8, 0x1f, 0x2, 0x7fff, 0x0, 0x679, 0x4, 0x8, 0x9, 0xfff, 0x0, 0xfff, 0x9, 0x80000001, 0x9, 0x80000000, 0x9, 0x5, 0x6, 0x5cf, 0x401, 0x7fff, 0x65cf], [0x2, 0x8, 0x5, 0x2, 0x3, 0x84ae, 0x3ff, 0x1, 0x8, 0xf03, 0x80000000, 0x2, 0x3, 0x7, 0xaffd, 0x9, 0x1f, 0x0, 0x10001, 0x1, 0x9, 0x3, 0x0, 0x0, 0xec, 0x8000, 0x3, 0x401, 0x0, 0x2, 0x7fffffff, 0x3c9, 0x24b, 0x7fffffff, 0x1000, 0x2, 0x0, 0xa6, 0x8, 0x5, 0xcb, 0x400, 0x8, 0x1, 0x0, 0x9, 0x20, 0x7, 0x4fe, 0xff, 0x9, 0x3, 0x6, 0x3, 0x54, 0x1, 0x5, 0x1, 0xb31d, 0x10001, 0x9, 0x3, 0x40, 0x80], [0x0, 0x1, 0x7fff, 0xffff, 0x414, 0x57d94f39, 0x7, 0x2, 0x2, 0x7, 0xffffffff, 0x400, 0x0, 0x4, 0x9, 0x1534, 0x3ff, 0x7, 0x1, 0x80, 0xfffffffe, 0x1, 0x4, 0x4, 0x5, 0x240, 0x3, 0x6, 0xffff679e, 0x10001, 0x0, 0x8, 0x18a6, 0x7, 0x5, 0x1, 0x5, 0x1, 0xfffffffe, 0x6, 0xfffffc01, 0x6, 0x9, 0xdf5d, 0x80000001, 0x1, 0x0, 0x8, 0x5, 0xb27a, 0x9, 0x200000, 0x800, 0x4, 0x6, 0x9, 0x3, 0x10001, 0x8, 0x10001, 0x3, 0x7c04, 0x5, 0x75de442e]}, 0x45c)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x1)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000000c0)=""/197)
socket$inet_udplite(0x2, 0x2, 0x88)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000))
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0xffffffffffffff80, 0x0, 0x2})

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/143)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000340)=0x3, 0x4)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[0x7f, 0x9, 0x1, 0x1, 0x3, 0xe3a, 0x2]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000))

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, 0x0, &(0x7f0000000400))
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240), 0x2)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
syz_open_dev$dri(&(0x7f00000000c0), 0x8000, 0x109100)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x8081)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r1=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r1, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={r1, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x7ff, 0x8000)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x42)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x8, 0x8, 0x1, 0x100, 0x2, 0x4})
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0)
write$vga_arbiter(r1, &(0x7f0000000240), 0xf)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x802, &(0x7f0000002300)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize}, {@default_permissions}, {@default_permissions}, {@allow_other}], [{@context={'context', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x65, 0xb33beb768ba6e2c1, 0x36, 0x62, 0x30, 0x37, 0x37], 0x2d, [0x31, 0x31, 0x61, 0x33], 0x2d, [0x32, 0x348221fb27dfd32, 0x66, 0x61], 0x2d, [0x36, 0x66, 0x66, 0x36], 0x2d, [0x5, 0x33, 0x31, 0x30, 0x37, 0x30, 0x62, 0x65]}}}, {@obj_type}]}})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002540)=ANY=[@ANYBLOB="1000af1a7619fd357b6db266d99fc41f5cae21349432e82dcd4ca54b78a6221e478f1fdb7a10cca7e1ff0f867eb1f39a838a965968f1774be96df618c04f71106d14be04393769a913df880941f5bfaa766c8c7052831390f33010c6888b6e563d116e3dd142", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x100000001}]}, 0x34}}, 0x0)

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000000000)=""/33)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
socketpair(0x1d, 0x6, 0x101, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000600)={@none, 0x3, 0x80, 0x6, 0x648, 0x9, "083305f327ee81ba53e0b9a75bf5d92db71889ba814f54bf1249ad0a54f5e10439d3a828607678b6d9df1b6ca11963194edcbbf6541e825bd56325b3a7dade7b41156c83b135100f385e87d63f31a8adb495b621172e0470a9a7ffee27ea0a3915184c6caa4c8d03286f6835ebde6d44686a9669a501ed97c0a5fabc09588f45"})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200), 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r7=>r2, 0x1, 0x8, 0x10001, 0x4, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@generic={0x44, 0x8, "ae5a62058ca3"}, @ra={0x94, 0x4, 0x1}]}}}}})
accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000440)=0x14, 0x100800)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25030000001c0001800600010002000000060001000a000000060001000a0000002c00018008000700", @ANYRES32=r7, @ANYBLOB="08000300ac1414ae08000700", @ANYRES32=r8, @ANYBLOB="0800060003000000050002000100000008000300000000001c00018008000300e0000001080006000100000005000200090000000800020002000000080003000800000008000300010000000800030008000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4004010}, 0x10)

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000000c0)={0x1, 0x5, {0x51, 0x9b6, 0x5, {0x2, 0x1}, {0x8, 0x2}, @rumble={0x5, 0x6}}, {0x56, 0x2a6, 0x3, {0x800, 0xb52}, {0x1, 0x3359}, @cond=[{0x1, 0x77, 0x2, 0x800, 0xf54, 0x67}, {0x4, 0x9, 0xfff, 0x1, 0x7f, 0x33}]}})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000040)=[0x4, 0x8, 0x2], 0x3, 0x185, 0x83, 0x1f, 0x0, 0x7, 0xfc, {0x9, 0x4, 0x43, 0x0, 0x401, 0x5, 0x176, 0x8, 0x8000, 0xe10d, 0x8000, 0x0, 0x401, 0xf84, "bcc7d52ab9a139bedabb2b4185e2d36a0b461d81019144b13896de20b14778c7"}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000240)=0x8000, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3e, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000140)={r2, 0x4})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={r2, 0x5, &(0x7f0000000000)=[0x3ff, 0x6, 0xffff, 0x1ff, 0x100], &(0x7f0000000040)=[0x6], 0x51, 0x4, 0x6, &(0x7f0000000080)=[0x3, 0x77ac, 0xfffffff8, 0xffffffff], &(0x7f00000000c0)=[0x9, 0x5, 0xfff, 0x0, 0x8, 0x10000, 0x2]})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/221)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffffc, 0x121041)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x8})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0xfffffffe}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000227bd700000dcdf2506000000421b67200e506fae47bfca66704b6f1b6755ba457c53261e3333f846709a"], 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="07000000000000000000cc00bd251de9f6ba0974fd4500001400000000002f90"]})

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000240))

05:28:30 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
socketpair(0x1d, 0x6, 0x101, &(0x7f00000005c0)={<r3=>0xffffffffffffffff})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, &(0x7f0000000600)={@none, 0x3, 0x80, 0x6, 0x648, 0x9, "083305f327ee81ba53e0b9a75bf5d92db71889ba814f54bf1249ad0a54f5e10439d3a828607678b6d9df1b6ca11963194edcbbf6541e825bd56325b3a7dade7b41156c83b135100f385e87d63f31a8adb495b621172e0470a9a7ffee27ea0a3915184c6caa4c8d03286f6835ebde6d44686a9669a501ed97c0a5fabc09588f45"})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200), 0x4)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', <r7=>r2, 0x1, 0x8, 0x10001, 0x4, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1a}, {[@generic={0x44, 0x8, "ae5a62058ca3"}, @ra={0x94, 0x4, 0x1}]}}}}})
accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0}, &(0x7f0000000440)=0x14, 0x100800)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25030000001c0001800600010002000000060001000a000000060001000a0000002c00018008000700", @ANYRES32=r7, @ANYBLOB="08000300ac1414ae08000700", @ANYRES32=r8, @ANYBLOB="0800060003000000050002000100000008000300000000001c00018008000300e0000001080006000100000005000200090000000800020002000000080003000800000008000300010000000800030008000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4004010}, 0x10)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000000), 0x4)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x608341)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x7ff)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xff, 0x7ffd, 0x3f})
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000140)=""/229)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x4000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r2})

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES16=r0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141419"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002c9c29fdb5dde8fb47656c2d136d20b2f27f30b0817c32387954da6bfce30fb9f937625b890bb3e58815394eba3c17e6fb9e1301ef900497119e9fb81fa82979c6488e445958bfd2c4da5f18f8", @ANYRES16=0x0, @ANYBLOB="0100004e5d258eca8bfdbc6e0000793a938e0e17fc429d01497f167b6ea74efcce5ca5d44d24aa1c5a615b11dd9a77a06600e96e668cfc65b015a9b3a0bbf5637a32ee502538a99f49c28d2dbf672606ce692a895b55c9216290ccda62af9c671b0daa9193895d6d663a934a91b5901dd52fd66a8e2a664f60342bb62fb45f41ac27b3e64b649d4738debb2967b88f8f79c1346a8b88a76722f4f6090735903c4f79d6217aabdc5b759eeef4e92d"], 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x100, 0x70bd29, 0xae, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000800}, 0x20000000)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:30 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3304, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0xffffffff, 0x6, 0x2, 0x13e1, 0x7ff, 0x7fffffff], &(0x7f0000000100)=[0x0], 0x6, 0x1, 0xdededede})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x80, 0x4})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000000)={0x2})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0x81, 0x8, 0x5, 0x0, 0x7ff, 0x143, {0x6, 0x9, 0xa4d, 0x9, 0x8000, 0x8e39, 0x4, 0x2, 0x1000, 0x0, 0x1ff, 0x2, 0xfffffffb, 0x42, "b7ef10b0d9bc7f50210f244774d61c4264245c09f9d10411eca54a8d1af3a07c"}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})
r6 = syz_open_dev$dri(&(0x7f0000000340), 0xae78, 0x20800)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000380)=""/10)

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f00000000c0)={0x6f696143, 0x80000000, 0xfff, 0xd42, 0x8, 0x31})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gre0\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x8000, 0x8000, 0x2, 0x6, {{0xc, 0x4, 0x1, 0xc, 0x30, 0x68, 0x0, 0x1e, 0x2f, 0x0, @loopback, @rand_addr=0x64010100, {[@lsrr={0x83, 0x1b, 0xad, [@private=0xa010102, @loopback, @remote, @remote, @local, @remote]}]}}}}})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000001c0)={0xffffff23, 0xfffffffb, 0x0, 0x3, 0x10, 0xae})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', r1, 0x700, 0x1, 0xfffffffa, 0x10001, {{0x8, 0x4, 0x1, 0x4, 0x20, 0x67, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x5c, 0x3, 0x4, [{@broadcast, 0x1}]}]}}}}})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:30 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:30 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x2}, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439c004f1c9a9b7cae2c2727676dbc4f57bb6dd196f2bd65816691e68565fd9ae9451509c9374c615ed606c2c9ae3edc30be5f38a362a4de5f4d3e2f483fb81ca44d410acab558798a37ec14fc5297130e011dcf5a8ff7b0b1ee1553e75d4e17b4ac15437bd26cc0be33ca8edd38e30eb8b45c4df14aedf3eb61baeb814b6beb4537a5bd640d28f96eb3146978c67eded2e06"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:30 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x80000000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0x2, 0xff, 0x24005})

05:28:30 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f00000000c0)={0x1f, 0x4, 0x7fff, 0x8001, 0x13})

05:28:30 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x3304, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000140)={&(0x7f00000000c0)=[0xffffffff, 0x6, 0x2, 0x13e1, 0x7ff, 0x7fffffff], &(0x7f0000000100)=[0x0], 0x6, 0x1, 0xdededede})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x80, 0x4})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000000)={0x2})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000200), 0x0, 0x81, 0x8, 0x5, 0x0, 0x7ff, 0x143, {0x6, 0x9, 0xa4d, 0x9, 0x8000, 0x8e39, 0x4, 0x2, 0x1000, 0x0, 0x1ff, 0x2, 0xfffffffb, 0x42, "b7ef10b0d9bc7f50210f244774d61c4264245c09f9d10411eca54a8d1af3a07c"}})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})
r6 = syz_open_dev$dri(&(0x7f0000000340), 0xae78, 0x20800)
ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000380)=""/10)

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x80, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000227bd7000ffdbdf25060000000800030006000000080003000600000008000200060000004000018008000700", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:31 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/182)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000240)=""/189)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:31 executing program 3:
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x1320, 0x12, 0x300, 0x70bd2b, 0x25dfdbff, {0x6, 0xc, 0x5, 0x5, {0x4e22, 0x4e22, [0x3, 0xffffffff, 0x9, 0x8], [0x366, 0x4, 0x77, 0x800], r0, [0x8, 0x98]}, 0x0, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "aa2adc902db1510fc3e5ad6fe04a6113329d220beda44570cb734cbb6fc179f0aa2a6face61018cbd053ae608fe91cd38a1d42a2b967d5021e1939f1ff4cd3da912b9b28949dcbf230d88d96981ec3a2b69c348251c77494be3bf4caa6305a83267451ff6a078ca5d257d79fed7a399b21255c31fc5a63edb30b877eb372d8f0cb11"}, @INET_DIAG_REQ_BYTECODE={0xdc, 0x1, "ab5319b9336a7aaccc7d3de83b9f4c70561f294ee097ae1074f297d35d87c8f295686bb5e73928ac4d7cd583a5364887532171b6ee9bd65f6c3adc1de1b8c13e6fdc42ae84718dbce69c7ca7684a38c33a2161f435810d52384837c97d6c00119bc040307fc579d1f34216052551ee62e472647a7f31c25c297aef2785b9cf8a8c1026b1b2a5feb0a8bdfc9d785c2fa05a2d0a1efb76988a869611132665022c4879c86d9a63b04861ba8c39c3e80a1fd3d80f3eab013907f38362c05089799570d4712ec9489bcc3ef79211bcad1065955b05a0c67702f6"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "c591ad7e9c36770fbbe687d34517fde58c1be1d5c9625092ef169de9524d7393059476664a7325b408d3a60691d9fb1574473860a490e6c4c9d2c794221ffd5d0b92711e0ba4bd0f09eddf91a41c11f42b7d5baf7547e380add1a90ace7ab9170e9b21807262edb305ecc1555fcf30c5b2333d8e3a21616f04b5c695796ac1739de12a921fe2"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "f5ed3a5e2667c87de70a635f4426557e0b70da9a96c6dda582fffc9839b287e2e748ccf2c3c3161587c5df99b00bd15f3b82360fdb46d6c64ffdb9108e6b10729ce6d40112f758af7ce4981ebcd37e88bafeb7e8196a87ba2b4d0e09d78eae689438aa775f8e2745b59142adca46f61b88c0c20dbdd44a43cae6ea288a3493f25e175261f69105f93a0bf8f1006510f77f2b2716b05c6e9036584b6c657934e08c0cb4489623adb0584abff88f99fe412f2676c607a520c6f63cafaa67806ffc1774e771f2cace65e8b2d417932f6130910f249d99"}]}, 0x1320}, 0x1, 0x0, 0x0, 0x40040}, 0x24040880)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300))
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000000)={0xbfe9, 0x2})

05:28:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x3, 0x280141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000140)={0x200, 0x7, 0x5e23, 0x80000001, 0x14, 0xa24})
r2 = syz_open_dev$dri(&(0x7f0000000040), 0x2f2, 0x10000)
ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0x4})
ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', <r3=>0x0, 0xf, 0x7, 0x40, 0x5, {{0x1a, 0x4, 0x1, 0x10, 0x68, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @private=0xa010100, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x36, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100]}, @noop, @cipso={0x86, 0x22, 0x3, [{0x0, 0x5, "d4e1dc"}, {0x2, 0xc, "c552b331ba17fbb6cb6b"}, {0x7db7e075d49403cf, 0xb, "22083358dd937c2101"}]}, @ssrr={0x89, 0x13, 0x7d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}]}}}}})
connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0xd, r3, 0x1, 0x1, 0x6, @multicast}, 0x14)
ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={0x0, <r4=>0x0})
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000300)={r4, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000340)={0x7, 0x9, 0x1})
sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x280, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ef0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x86cbef5}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x11b6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53b36975}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b35a075}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce87}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x12c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77093bda}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb16}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4417d557}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b958d48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x83e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d4a518c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36306046}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3191831e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d0642cf}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e59d5a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f9ead02}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc326}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3787a2b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bf335d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xef4a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6058e7f3}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3408}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x411f8dad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ae9090f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69809f3a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bffba39}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf37e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1acff395}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10001}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28ed8fdb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e1d489f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71e63493}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x43da683b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3388b85a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd3a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x86ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe8c6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x449e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x70, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x99bd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d29}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29804c82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28119eed}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc21c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1ddbb8a7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40adb2a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31982e13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55dd232c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe28f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b8f9f70}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6baa7c2b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x55886dda}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a2b085d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7155}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x415ed721}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc98f055}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x408e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa17b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a2d5bae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5387}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b213040}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x204584c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x2404c0d0)

05:28:31 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x442, 0x5a5603)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'syztnl1\x00', <r3=>0x0, 0x7800, 0x20, 0x10001, 0x1b6f, {{0x10, 0x4, 0x2, 0x1f, 0x40, 0x66, 0x0, 0xf0, 0x4, 0x0, @empty, @local, {[@cipso={0x86, 0x22, 0x1, [{0x5, 0xc, "fd1c367b37fb386bf1bc"}, {0x0, 0x10, "eac399d47d92113b4ca51e05ef06"}]}, @noop, @lsrr={0x83, 0x7, 0xaf, [@multicast2]}]}}}}})
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000300)=""/198)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000000c0)={'tunl0\x00', r3, 0x8, 0x10, 0x7f, 0x800, {{0x19, 0x4, 0x1, 0x7, 0x64, 0x66, 0x0, 0x6, 0x29, 0x0, @broadcast, @remote, {[@cipso={0x86, 0x36, 0x3, [{0x5, 0xa, "666734874f557504"}, {0x2, 0x3, "f7"}, {0x7, 0x8, "0a69a6ec6945"}, {0x5, 0xc, "96b2649cee2cf1756292"}, {0x0, 0x8, "a1a8206c6b62"}, {0x1, 0x7, "ac6d02ff63"}]}, @end, @lsrr={0x83, 0xf, 0x4f, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast]}, @timestamp={0x44, 0x8, 0x22, 0x0, 0xb, [0x800]}]}}}}})

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3fc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x7ffc, 0x40, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:31 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:31 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x5f61aab2b15cd39c, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r1=>0x0, <r2=>0x0})
write$input_event(r0, &(0x7f00000000c0)={{r1, r2/1000+60000}, 0x16, 0x5, 0x9}, 0x18)
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x4, 0x5, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080))

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000340)={{0x1, 0x8001, 0x3ff, 0x6}, 'syz1\x00', 0x51})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB=';\x00'/16, @ANYRESOCT=r0, @ANYRESDEC]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x2, 0x3})
accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x800)
r2 = socket(0x1e, 0x63a907082f287ab0, 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x5, 0x3}, 0x45)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:31 executing program 5:
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)={r0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000300)={r0})

05:28:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300))

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000140)=""/244)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000040)=[0xb75, 0x5, 0x2632, 0xffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x4, 0x9, 0xc0c0c0c0})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
r2 = socket(0xf, 0x4, 0x4)
sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2005c051)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000240)=""/199)

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200800)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="677265300000000000e3ffffff000000", @ANYRES32=<r2=>0x0, @ANYBLOB="070000070000008000000f544600001800650000582f9078ac1414aaac1414bb94040100"]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x77479a6c69dcaa46}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000380)={0x9, &(0x7f0000000340)=[0x8, 0x2, 0x1, 0x9, 0x3, 0x2, 0x2b5, 0x1000, 0xfff]})

05:28:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x90, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 0:
accept4$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x14, 0x80800)
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000140)={0x8, 0x1, 0x80000000})
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000100)={0x1, 0x8})

05:28:31 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/182)
shmctl$IPC_RMID(r0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})

05:28:31 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)
r2 = socket(0x25, 0x6, 0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0xce, 0xfffffff7, {{0x1c, 0x4, 0x3, 0x8, 0x70, 0x67, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@cipso={0x86, 0x19, 0x2, [{0x5, 0x4, '\bl'}, {0x0, 0x2}, {0x1, 0xd, "f1806b86473f0fa2bec66f"}]}, @ssrr={0x89, 0xb, 0xb9, [@rand_addr=0x64010102, @remote]}, @end, @cipso={0x86, 0x36, 0x0, [{0x2, 0x4, "19fd"}, {0x2, 0x6, "d1ac23a2"}, {0x0, 0x7, "01737e8d36"}, {0x5, 0xb, "0fa060e935869a5176"}, {0x7, 0x8, "bffe23a7e598"}, {0x7, 0xc, "b53135719740e3ea7efa"}]}]}}}}})

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x3f, 0x80900)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000200)={<r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000240)={r1, 0x2})
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14b0, 0x13, 0x200, 0x70bd2b, 0x25dfdbff, {0x8, 0xf0, 0x5, 0x3f, {0x4e23, 0x4e20, [0x2, 0x5, 0x9, 0x8], [0xa41, 0x9, 0x3f, 0x2], 0x0, [0x1, 0x1000]}, 0x6, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xf1, 0x1, "8bb20ac89c591db9d000d9929a636ce7073a21ce4a22f3ccdec2dfadc916a42e33c83af5369dac23bdf096dc12a16328f466ef12df4519f81377cd3a5bec0a338e1ddbd07dc8e1789804e87d4183aa45951effc9cb173c17cdf6bf9632d6ed2438991ac516c2a412ee46e7cf73cf1a97e48ef62d10210393cdddfa2e62ae69d05487443ac3d11ffbad9a41087bed3daf5e53430b709a0070b6dea88ff010ca69e680c8dabe1e114c6242f0dfb3472a6e08fdeb0c713c2526ef677cd393b1b62553c35d5095a4a82cb0a9f8d6056f9e7ca96ab8a1a5f19eb5595f62d5b225cc9a04e31be42a449d71c7ae150c32"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "3ecc022b8b9b4c830753f6e97ed84c4bc4460c980f7b67761db9c33f78f9cfa0f52157f3f04f213073930ffdd7515e3ba110bba7dd6394b26ba2981db978ab429094ec4de2"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "4370f761f801fc7d998c4ada475820ea91981aa6a34a6c6eee815ecc3b339f1dda5bfffce1ecbfa2d14664877fc4cd15326f8329fd051653209a61c651b1191f75f6"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "d3d85f7b04ff2eb23857d96a76282b0b26b6048954111e86e79f5fe33286a9bb870220bed4510c01e0a0fe8cb8fdc972af80de59d256f6c51f8f315293f70c312178cd62f6dff48a115ef90e7a4cb31ed36325d3474c285a3d159c53e4bb9d46775e675de20c7611e1a4030a2b713295b68649f939f13b3e46e76fc567bf262703293d6ae1ee3d0a8569963609becb31cdbeee3ee9ea2b9a686d6e9065f1809d66d3ca9ce5cb8dd348f1abd54828dd28fd293dbbbe434b54c7d2b4da5a30481076248cf8ff9001dfbc30f1d229854229552edc4db6b23010d81d4a246e40a38928be81385ed6970b04e19520ca2c"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "3448da72436537be1e34a2c277de7af895198be39e1c939200a2c30be6e64f2cb560ec38e6c775b43bf4f10c84bebbec079595c8cb7cbe5facfd9de5d354f8df540628f9"}, @INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "c06d849ec7c5294526105d041e2880a31910c5ee55c790588d5d5b66e53d493d1dd31a80fd66dbc23965099c69df5e55569db62e3c10ecd21d417bc725cbe5ea8f44e118c839d9ed3865ad4ee45ad1d8fc4b4df290ba3d74a0f430d82df4869f62745e7d68e614ef5ac91611d827310ae21f53bf332d7297f1596d4cd4c7ba726d7a9ac5d752c8f10653d11da2fa182632749c117110ff5286eb5d957c3d966f91da39d095526a6f766f88d1edea198f98977a78e0b1acf1e694e3563fd1c2dbe8b690d144bbafd7e0f82bbb11794e"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "faa3823a48d64326abcdea7d43dfde3b11f894f9788f1e9e62e2ef23f169c037d42cbb580defa02b7fd55bfaeaca5557b8a25f086576a067472aaa274e71424e3dc30f19333a2f639d0e482d4e8ad97bd9b99037aeccebfe3f698e137be07bd67c0610b5841a380bc7cd12608f7d92056ef9a93abd4a6af20ae05d3e8793b2a59a7bbbcbf9f6f83eb73c748e502d63501fa4b796864dabf28769973dd3a771398e8f995d9b0501cc61f54f1cd7df9d457657bad869218ccfb447774202b3e4de2f"}]}, 0x14b0}, 0x1, 0x0, 0x0, 0x8800}, 0xc006)
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7ffd})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000180)={0x0, 0x1})
ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x4})
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000280)={0x7, <r3=>0x0})
ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000002c0)={r3, 0x200})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080))

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="00846606", @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x8, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55042b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), r0)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4048051)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x400, 0x7, {{0x12, 0x4, 0x1, 0x30, 0x48, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x34, 0xf1, 0x1, 0x8, [{@local, 0x80000000}, {@multicast1, 0x2}, {@rand_addr=0x64010102, 0x3f}, {@local, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@empty, 0x9}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000), 0xbe, 0x125c3)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x360, 0x12, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0xc1, 0xb0, 0x47, {0x4e21, 0x4e22, [0x0, 0x8, 0x3ff, 0x8], [0xff800000, 0x4, 0x400, 0x5], 0x0, [0x2, 0xc3]}, 0x6, 0x80000001}, [@INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "95da09fb2b8131f11dd2317ceea2d3d159696393280c42226a9737361d0cf56f7738683acfd556db69c44ca855095729f9df0903d078b87bf91128e431b7e26a92b67a2628fa48bff7a96d65cb70a9761f3828ac3ae5f6daf54d255a99711fd10a28aadfe489e7ce3dc2f1e2d762539a5905216b5ec2c8bcd8e2efac8bdcb35c7cbdf1954fb8c78843c0547c595087d4bae74a6ae24cdc5433d9d316297252c76c8c984b3197ab9fbdd761858eed9a808f615cf7578d7c0a5146f9f56fbf6d5ee93bb5ef501dd0d8f4efcc10b578418c89d8b88a887480e4cff374655cf256e7f4fcb34c"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "6cacef1262d14a083f54684899939e9caaf3d1021b755ae8e031797a8e1ad679f94c07c9f5d474bdd7b9ff3e72f71c735d5de84e5395cc71c2d61c907699e6c2f0f84a7cd849e3df8776416acf4f9302afea87e01430ad092adf926f1d45fd82cef05a83f64fd5da3be955429049c8511ecee7449b93984f1a5964740703620e0d1430d0aaa3c8f43ccf2e4bc5f25593aca2069763e50e2b318617c0510ffe6e4f2cad6776c8dd0411df2cf26cbf984202465eabd66c0f83c408cac7624785f32497ed6c12ee75ed7b44ff6bdc97ec8cd94619e58a31d610dc394051463c620c92eeb7e8d74122155c24d3d6bd402f2071f3d8f03d737249bc"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "f5b1fdc778fbd1117c18862b0c06a46e9134d7174d3f97d64265543ffabdb3beacd8c54c8b689ebea4d7208a49f00a5546e757afcb90e540d3f567b080f3a7e70aaca23d81a5ca4146b85db5870118fd5025faaaa036db1dfaf0378216720c1ff7810ef1a1438e8b10d368e90a903a2c6e121fd401678b2adfd5676b87"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "71bb16f4fdfce34366a79672"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "4022dc312e0ca584272eb7a13c02ab5dc05dc5182e01ffcf3b4a20265280e48fd1097f572a"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "05a7ceb60722f6a43730ffedc0a15894ab4ebe090d3d1d171fcd5fcee63a1959dd6eb0a96c80e336f87b3bfb090e1e1f52b81eca6a4554fe13aaacdc9b5f0100849ccb4460c4f75abcb49fb8d1810812500bda701940675da9c84a1ed7acc37bd016c2c4b2cecff8"}]}, 0x360}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x0, 0x800, 0x81, 0x3, 0x3, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x1, 0x4, 0x94})
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x4, 0x80100)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000180)={0x0, 0x2})
syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x40301)

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:31 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x8001, 0x7})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x0, {0xfffffffd, 0x4, 0x5, 0x400}}, 0x20)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2})
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000000)={0x3f, {0x80, 0x6, 0xbbd, 0x7ff, 0x7fffffff, 0x7}})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB=';\x00'/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/181)

05:28:31 executing program 5:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2})

05:28:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x2, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000180)={0x401, 0x3, 0x2, 0x6, &(0x7f0000000140)=[{0x1, 0x7, 0xff, 0x9}, {0x6, 0x0, 0x5, 0x9}, {0x3ff, 0x0, 0x400, 0x43c}, {0xf247, 0xc6b4, 0x9, 0x5}, {0xfffd, 0x3, 0xfffa, 0x5}, {0x1, 0x6, 0x38, 0x80}]})
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000001c0)={0xfffffff9, 0x1000, 0xfff})
ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000)=[0x3, 0x7, 0x3ff, 0x2, 0x6, 0xfff, 0x4], 0x2, 0x3, 0x6, &(0x7f0000000080)=[0x2, 0x1, 0x1], &(0x7f00000000c0)=[0x7, 0x9, 0x1f, 0x2, 0xcf6a]})

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r1, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x2000100000000, 0x60042)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={0x0, 0x1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x164, 0x15, 0x20, 0x70bd2c, 0x25dfdbfc, {0x1e, 0x20}, [@INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "ebe2bb9d88a2a37c0ef7fa9933d78ad44f548dca9e301d675c0622ace5c6ff87a88f003462e0e90b8d0377b0e6421982dde3798f26ba2786ae728e2831a6f03037d8fd5e24dcd7bb63e9ce777e9b93ffc93bcbf527c40a533df5cf1aaaa1588877e519aab84668174860f79f9a4a84683140cc560bb9716c8efbc8d685ab3cee86e9461c4ab1e16d14a064e80c471cee2f3d98a39349a57dd3ab12be80369d30130db720"}, @INET_DIAG_REQ_BYTECODE={0xa7, 0x1, "aefbe8f1c02dcdc2337ca013b3f210e7aa3ddc0c4c9e8cdc46c65d5a83a2f51e79251c7c4652aa44062f614dc93f55cdef0f9f6e2db51c479a38a02371fbab709a4383530b0dac1c0a256dfdf167a3ea7002d40af0e2d86cd93f7c9ed27e414edafe883da2b35c5d3c2b028b32288e96fdb39674c7fb5b662562a6fe53303f66d2803e2fcf8022ff867e027d78ab96c3060bd19967052aeb12bc150b5f29fc476cbf90"}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3b000000b700"/16, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000004500001400000000002f9078ffffffffac141439"]})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:31 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)="bbc4295c81129061562f2cd0a5c0db31f78ea9a6da132d0e77a540932fd983474c37ceca51496411ecf23e56396eef79830da145002a018870182a6ab70cafb6b9f5d5f5bddc3b6c3702", 0x4a, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb90f, 0x40, 0x7})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000140)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080))

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000000)={r2, 0x1})

05:28:31 executing program 1 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16]})
r3 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000), 0x4)
connect$caif(r3, &(0x7f0000000240), 0x18)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x802)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0)=0x9, 0x4)
ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, &(0x7f00000000c0)=""/197)

05:28:31 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', <r2=>0x0, 0x700, 0x7, 0x80, 0xf54, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x58, 0x2f, 0x0, @local, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'erspan0\x00', <r3=>r2, 0x10, 0x0, 0x400, 0x1, {{0x26, 0x4, 0x2, 0x1, 0x98, 0x68, 0x0, 0xff, 0x6, 0x0, @empty, @empty, {[@rr={0x7, 0x17, 0xa2, [@broadcast, @remote, @remote, @multicast2, @loopback]}, @timestamp={0x44, 0x1c, 0xe9, 0x0, 0x6, [0x9, 0xfff, 0x239, 0x20, 0x3, 0x7f]}, @timestamp_addr={0x44, 0x34, 0xb2, 0x1, 0x1, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1c}, {@loopback, 0x1}, {@loopback, 0xd52}, {@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x92d0}]}, @ssrr={0x89, 0xb, 0xb5, [@loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0xf, 0xe8, [@rand_addr=0x64010100, @loopback, @loopback]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r1, 0x200, 0x70bd27, 0x25dfdb7f, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x3ff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40804}, 0x40400c0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x1, 0x7, 0x3, 0x1, 0x3, "7edc3e0a288c9b7222ddf4c35f77acfdb7dadfcbcdaa15140aa4d70fe0aca69b489b68f2147973ea63669300d9ef6560cd70e7ac3ac854957cc175600c93a01ead29059cadf897846790b96e34a2b3aeb2a2d6b70fee17363d79b79927cd626cae5f3534aff1f8d6c9764ba60ace161c55e82b140e21dd424ef21431bbf73155"})
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="7f0000009e3897cc30687c0000000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000004500001400000000002f9078ffffffffac1e0001"]})

05:28:31 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000001c0)={0x2, 0xff, 0x8001})
ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil})
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
select(0x40, &(0x7f0000000000)={0x9e, 0x401, 0x7, 0x5, 0x7, 0x366a, 0x0, 0x8}, &(0x7f0000000040)={0x3, 0xde, 0x7e2c, 0x1, 0xffff, 0x2, 0x1, 0x9}, &(0x7f0000000080)={0x1, 0x2, 0x1, 0x5d, 0x6, 0x8, 0xfffffffffffffe00, 0x1}, &(0x7f0000000100)={r2, r3/1000+10000})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5})
ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000140)={0x7, 0x1, 0x9, 0x6, 0x2})

05:28:31 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/233)

05:28:31 executing program 5:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:31 executing program 0:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x14)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x0, @broadcast}], 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x7, 0x0, 0x73, 0x3, &(0x7f0000000000)=[{0x4, 0x217, 0x101, 0x4}, {0x4, 0x2, 0x9, 0x8d69}, {0xe3, 0x4, 0x9, 0x6}]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0xb90f, 0x40, 0x7})

[ 1836.724785] ==================================================================
[ 1836.732393] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210
[ 1836.739454] Read of size 8 at addr ffff88808ff9d3c0 by task syz-executor.3/2443
[ 1836.746902] 
[ 1836.746921] CPU: 1 PID: 2443 Comm: syz-executor.3 Not tainted 4.14.231-syzkaller #0
[ 1836.746928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1836.746932] Call Trace:
[ 1836.746953]  dump_stack+0x1b2/0x281
05:28:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
r2 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})

05:28:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x80000001, <r1=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x3f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r2})

[ 1836.746968]  print_address_description.cold+0x54/0x1d3
[ 1836.746980]  kasan_report_error.cold+0x8a/0x191
[ 1836.746992]  ? vgem_gem_dumb_create+0x200/0x210
[ 1836.747003]  __asan_report_load8_noabort+0x68/0x70
[ 1836.747015]  ? vgem_gem_dumb_create+0x200/0x210
[ 1836.747024]  vgem_gem_dumb_create+0x200/0x210
[ 1836.747041]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1836.747053]  ? __drm_printfn_debug+0x70/0x70
[ 1836.747061]  drm_ioctl_kernel+0x14c/0x200
[ 1836.747078]  drm_ioctl+0x419/0x870
[ 1836.817810]  ? __drm_printfn_debug+0x70/0x70
[ 1836.822220]  ? drm_getstats+0x20/0x20
[ 1836.826021]  ? futex_exit_release+0x220/0x220
[ 1836.830511]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 1836.835627]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1836.840683]  ? drm_getstats+0x20/0x20
[ 1836.844492]  do_vfs_ioctl+0x75a/0xff0
[ 1836.848297]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1836.852708]  ? lock_downgrade+0x740/0x740
[ 1836.856858]  ? __fget+0x225/0x360
[ 1836.860320]  ? do_vfs_ioctl+0xff0/0xff0
[ 1836.864296]  ? security_file_ioctl+0x83/0xb0
[ 1836.868705]  SyS_ioctl+0x7f/0xb0
05:28:32 executing program 1:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, <r1=>0x0})
r2 = getuid()
getgroups(0x4, &(0x7f00000026c0)=[0xee01, <r3=>0x0, 0x0, 0x0])
syz_fuse_handle_req(r0, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000002800)={&(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x9, {0x7, 0x21, 0xfffffff7, 0x802060, 0xa7, 0x1, 0x3, 0xc0000000}}, &(0x7f00000000c0)={0x18, 0x0, 0x5b52, {0x6}}, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0xffffffff7fffffff, {0x7}}, &(0x7f0000000140)={0x18, 0x0, 0x1ff, {0x100}}, &(0x7f0000000180)={0x18, 0x0, 0x25, {0xc36a}}, &(0x7f0000000240)={0x28, 0xffffffffffffffda, 0x65e5f13, {{0x20, 0x80000001, 0x1, r1}}}, &(0x7f0000000340)={0x60, 0xfffffffffffffff5, 0x9, {{0x7, 0x0, 0x800, 0x9, 0xd36, 0xfd8e, 0xf0, 0x7}}}, &(0x7f0000000280)={0x18, 0x0, 0xe334, {0xd328}}, &(0x7f0000002980)=ANY=[@ANYBLOB="adbd036260afddd10a373e6fca7d5d001c0200"], &(0x7f0000000400)={0x20, 0xffffffffffffffda}, &(0x7f00000024c0)={0x78, 0x0, 0x5, {0x2, 0x4, 0x0, {0x6, 0x3, 0x81, 0xffff, 0x5, 0x221, 0x0, 0x5, 0xfffffbff, 0xa000, 0x8, 0xee01, 0xee00, 0x401, 0x5653}}}, &(0x7f0000002540)={0x90, 0xffffffffffffffda, 0x7e, {0x0, 0x2, 0x0, 0x2, 0x46c7, 0x1, {0x3, 0x40, 0x4, 0x7, 0x16, 0x1, 0x6, 0x5, 0x0, 0x1000, 0xffff, 0xee01, 0x0, 0x8, 0x3ff}}}, &(0x7f0000002600)={0xb0, 0x0, 0x8, [{0x3, 0x5, 0xf, 0x40, '/dev/dri/card#\x00'}, {0x6, 0x100000000, 0xd, 0x3, '!R\xa6:#:!\'(!!:@'}, {0x2, 0x3, 0xf, 0x7fffffff, '/dev/dri/card#\x00'}, {0x3, 0x2, 0xf, 0x3, '/dev/dri/card#\x00'}]}, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000daffffff06085c885ea50000"], &(0x7f0000002700)={0xa0, 0xffffffffffffffda, 0x3, {{0x1, 0x0, 0xffffffffb2fdd527, 0x4, 0x8, 0x7, {0x3, 0x4, 0x3, 0x100000000, 0x4, 0x2, 0x3, 0x2, 0x3, 0x1000, 0x6, r2, r3, 0xfffffffe, 0xc8b}}, {0x0, 0x1}}}, &(0x7f00000027c0)={0x20, 0xffffffffffffffda, 0x5, {0x80000000, 0x4, 0x4, 0x2}}})
r4 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r5=>0x0})
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000004200)={0x2020, 0x0, <r7=>0x0}, 0x2020)
keyctl$update(0x2, 0x0, &(0x7f0000002880)="768445508deb0e4980421e7750d479cdcf8aef37efe7135ca6f9a46471f49d873916993c5cb8dc0b236a9e8d088946e3a8429690d673c5591464d43330da84bf75f6361e6f92b468c7fd7fdfdd179868e02c8b300ebb090ef3b23da5c6431d33e099c59655907ccf1e2497bb948b80fe79c156ac13872279c65871d788a14ad99743f33a636053847a59aab20f12498303995f1b1dbeb84e04e8d2", 0x9b)
write$FUSE_ATTR(r6, &(0x7f00000020c0)={0x78, 0x0, r7}, 0x78)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r8, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000006240)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0x0, r7}, 0xfffffffffffffcf0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000300)={r5})
syz_open_dev$dri(&(0x7f0000002940), 0x9, 0x10002)

05:28:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000140)={0x501, 0x5, &(0x7f0000000040)=[0x4, 0x4, 0x7, 0x3, 0x6], &(0x7f0000000080)=[0x401, 0x5, 0x3d], &(0x7f00000000c0)=[0x8, 0x1, 0x400, 0x7], &(0x7f0000000100)=[0xffffffe2, 0x6], 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
r3 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x200141)
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, 0x0)
ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000400)=[0x10001, 0x7, 0x81, 0x6], &(0x7f0000000440)=[0x6, 0x3, 0x0, 0xf9, 0x4, 0x4, 0x9], 0x76, 0x5, 0x10001, &(0x7f00000004c0)=[0x7, 0x0, 0x59b, 0x6, 0x1000], &(0x7f0000000500)=[0x8001, 0x8, 0x3, 0xc6]})
ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f00000003c0)={0x0, 0x4, &(0x7f0000000240)=[0x20, 0xfff, 0x0, 0x9], &(0x7f0000000280)=[0x9, 0x10000], &(0x7f0000000340)=[0x7, 0x0, 0xf0000000], &(0x7f0000000380)=[0x1ff], 0x0, 0x6389})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000001c0)={<r5=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000200)={r5})

[ 1836.872078]  ? do_vfs_ioctl+0xff0/0xff0
[ 1836.876051]  do_syscall_64+0x1d5/0x640
[ 1836.879943]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1836.885148] RIP: 0033:0x466459
[ 1836.888330] RSP: 002b:00007f635cc96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1836.896036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1836.903308] RDX: 00000000200002c0 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1836.910571] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000
[ 1836.917835] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
05:28:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, <r2=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000080)={0x4, 0x7fff, 0x80, 0xf983, 0x26, 0x1d1})
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r3, &(0x7f0000000100)={0x2020}, 0x2020)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x9, 0x800)
r5 = syz_open_dev$dri(&(0x7f0000000100), 0x40, 0x2000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil})

05:28:32 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000480), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0xff, 0x8000, 0x3f, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={<r2=>0x0})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000300)={r2, 0x3, &(0x7f0000000040)=[0xd6e, 0x10000, 0x8], &(0x7f0000000080)=[0x43b], 0x44, 0x6, 0x8, &(0x7f0000000180)=[0x5, 0x3ff, 0x800, 0x5, 0x1000, 0xa1bb], &(0x7f00000001c0)=[0x3500, 0x1, 0x3, 0x7f, 0x1]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000000)={r2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1})
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[0xf29, 0x8, 0x7]})
msgctl$MSG_STAT(0xffffffffffffffff, 0xb, &(0x7f0000000140)=""/47)

[ 1836.925105] R13: 00007ffc05ff272f R14: 00007f635cc96300 R15: 0000000000022000
[ 1836.932377] 
[ 1836.933998] Allocated by task 2443:
[ 1836.937622]  kasan_kmalloc+0xeb/0x160
[ 1836.941423]  kmem_cache_alloc_trace+0x131/0x3d0
[ 1836.946089]  __vgem_gem_create+0x44/0xe0
[ 1836.950154]  vgem_gem_dumb_create+0xc5/0x210
[ 1836.954563]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1836.959578]  drm_ioctl_kernel+0x14c/0x200
[ 1836.963723]  drm_ioctl+0x419/0x870
[ 1836.967255]  do_vfs_ioctl+0x75a/0xff0
[ 1836.971051]  SyS_ioctl+0x7f/0xb0
[ 1836.974414]  do_syscall_64+0x1d5/0x640
[ 1836.978299]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1836.983481] 
[ 1836.985100] Freed by task 2443:
[ 1836.988372]  kasan_slab_free+0xc3/0x1a0
[ 1836.992341]  kfree+0xc9/0x250
[ 1836.995441]  drm_gem_object_free+0x8f/0x150
[ 1836.999759]  drm_gem_object_put_unlocked+0xc3/0x160
[ 1837.004779]  vgem_gem_dumb_create+0xf2/0x210
[ 1837.009220]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1837.014219]  drm_ioctl_kernel+0x14c/0x200
[ 1837.018346]  drm_ioctl+0x419/0x870
[ 1837.021865]  do_vfs_ioctl+0x75a/0xff0
[ 1837.025643]  SyS_ioctl+0x7f/0xb0
[ 1837.028990]  do_syscall_64+0x1d5/0x640
[ 1837.032864]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1837.038030] 
[ 1837.039638] The buggy address belongs to the object at ffff88808ff9d2c0
[ 1837.039638]  which belongs to the cache kmalloc-512 of size 512
[ 1837.052287] The buggy address is located 256 bytes inside of
[ 1837.052287]  512-byte region [ffff88808ff9d2c0, ffff88808ff9d4c0)
[ 1837.064152] The buggy address belongs to the page:
[ 1837.069083] page:ffffea00023fe740 count:1 mapcount:0 mapping:ffff88808ff9d040 index:0x0
[ 1837.077229] flags: 0xfff00000000100(slab)
[ 1837.081356] raw: 00fff00000000100 ffff88808ff9d040 0000000000000000 0000000100000006
[ 1837.089222] raw: ffffea0001e06760 ffffea0002446360 ffff88813fe80940 0000000000000000
[ 1837.097082] page dumped because: kasan: bad access detected
[ 1837.102771] 
[ 1837.104387] Memory state around the buggy address:
[ 1837.109302]  ffff88808ff9d280: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 1837.116638]  ffff88808ff9d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1837.124100] >ffff88808ff9d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1837.131464]                                            ^
[ 1837.136985]  ffff88808ff9d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1837.145485]  ffff88808ff9d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 1837.154023] ==================================================================
[ 1837.163368] Disabling lock debugging due to kernel taint
[ 1837.179418] Kernel panic - not syncing: panic_on_warn set ...
[ 1837.179418] 
[ 1837.187026] CPU: 1 PID: 2443 Comm: syz-executor.3 Tainted: G    B           4.14.231-syzkaller #0
[ 1837.197152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1837.208727] Call Trace:
[ 1837.211799]  dump_stack+0x1b2/0x281
[ 1837.215742]  panic+0x1f9/0x42d
[ 1837.219221]  ? add_taint.cold+0x16/0x16
[ 1837.223218]  ? ___preempt_schedule+0x16/0x18
[ 1837.227761]  kasan_end_report+0x43/0x49
[ 1837.231024] caif:caif_disconnect_client(): nothing to disconnect
[ 1837.231753]  kasan_report_error.cold+0xa7/0x191
[ 1837.231767]  ? vgem_gem_dumb_create+0x200/0x210
[ 1837.247591]  __asan_report_load8_noabort+0x68/0x70
[ 1837.253797]  ? vgem_gem_dumb_create+0x200/0x210
[ 1837.258747]  vgem_gem_dumb_create+0x200/0x210
[ 1837.263792]  drm_mode_create_dumb_ioctl+0x221/0x2b0
[ 1837.269372]  ? __drm_printfn_debug+0x70/0x70
[ 1837.275734]  drm_ioctl_kernel+0x14c/0x200
[ 1837.280559]  drm_ioctl+0x419/0x870
[ 1837.284415]  ? __drm_printfn_debug+0x70/0x70
[ 1837.290569]  ? drm_getstats+0x20/0x20
[ 1837.295227]  ? futex_exit_release+0x220/0x220
[ 1837.301172]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[ 1837.306478]  ? debug_check_no_obj_freed+0x2c0/0x680
[ 1837.313598]  ? drm_getstats+0x20/0x20
[ 1837.318300]  do_vfs_ioctl+0x75a/0xff0
[ 1837.322749]  ? ioctl_preallocate+0x1a0/0x1a0
[ 1837.328648]  ? lock_downgrade+0x740/0x740
[ 1837.333808]  ? __fget+0x225/0x360
[ 1837.340035]  ? do_vfs_ioctl+0xff0/0xff0
[ 1837.345196]  ? security_file_ioctl+0x83/0xb0
[ 1837.351177]  SyS_ioctl+0x7f/0xb0
[ 1837.356193]  ? do_vfs_ioctl+0xff0/0xff0
[ 1837.360953]  do_syscall_64+0x1d5/0x640
[ 1837.365989]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[ 1837.372099] RIP: 0033:0x466459
[ 1837.375464] RSP: 002b:00007f635cc96188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1837.383936] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[ 1837.391765] RDX: 00000000200002c0 RSI: 00000000c02064b2 RDI: 0000000000000003
[ 1837.399655] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000
[ 1837.408529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[ 1837.416992] R13: 00007ffc05ff272f R14: 00007f635cc96300 R15: 0000000000022000
[ 1837.426170] Kernel Offset: disabled
[ 1837.429809] Rebooting in 86400 seconds..