41b, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r8, 0x1f, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @ib={0x1b, 0x200, 0x400, {"7d797b55bb031325f9b5486dffd6a78a"}, 0x5, 0xdad, 0x3}}}, 0x118) r9 = syz_open_procfs(r3, &(0x7f0000000080)='net/nf_conntrack_expect\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, 0x0, 0x0) 07:24:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x5, 0x8, 0x40}, 0x40) 07:24:32 executing program 3: setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) geteuid() syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000080)={0x3}) 07:24:32 executing program 0: read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200000, 0x0) sendmsg$xdp(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x27}, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x24000000}, 0x4000047) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) 07:24:32 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x218182) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000180)={0x1, {&(0x7f00000000c0)=""/114, 0x72, &(0x7f0000000140)=""/20, 0x2, 0x4}}, 0x48) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x6, 0x8, 0x40}, 0x40) 07:24:32 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) r5 = syz_open_procfs(r3, 0x0) r6 = syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r8}}, 0x10) syz_open_procfs(r1, &(0x7f00000002c0)='net/ip6_mr_vif\x00') ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x100000000, 0x400}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r8, 0x1f, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @ib={0x1b, 0x200, 0x400, {"7d797b55bb031325f9b5486dffd6a78a"}, 0x5, 0xdad, 0x3}}}, 0x118) syz_open_procfs(r3, &(0x7f0000000080)='net/nf_conntrack_expect\x00') 07:24:32 executing program 3: setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) geteuid() syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:32 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x218182) 07:24:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, r2}, 0xffffffffffffffb5) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x7, 0x8, 0x40}, 0x40) 07:24:32 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) r5 = syz_open_procfs(r3, 0x0) r6 = syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r8}}, 0x10) syz_open_procfs(r1, &(0x7f00000002c0)='net/ip6_mr_vif\x00') ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x100000000, 0x400}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r8, 0x1f, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, @ib={0x1b, 0x200, 0x400, {"7d797b55bb031325f9b5486dffd6a78a"}, 0x5, 0xdad, 0x3}}}, 0x118) 07:24:32 executing program 3: setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) geteuid() 07:24:32 executing program 4: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x218182) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x8, 0x8, 0x40}, 0x40) 07:24:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) fstat(r0, &(0x7f0000000040)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x52001, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x402, 0x4) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) r5 = syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r7}}, 0x10) syz_open_procfs(r1, &(0x7f00000002c0)='net/ip6_mr_vif\x00') ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x100000000, 0x400}) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) 07:24:32 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 3: setreuid(0xffffffffffffffff, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) 07:24:32 executing program 0: read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x200000, 0x0) sendmsg$xdp(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x27}, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x24000000}, 0x4000047) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r3}) 07:24:32 executing program 4: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x218182) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) syz_open_procfs(r1, &(0x7f00000002c0)='net/ip6_mr_vif\x00') ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0x100000000, 0x400}) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:32 executing program 3: setreuid(0xffffffffffffffff, 0xffffffffffffffff) 07:24:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:32 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 4: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x218182) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) syz_open_procfs(r1, &(0x7f00000002c0)='net/ip6_mr_vif\x00') 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xa, 0x8, 0x40}, 0x40) 07:24:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) 07:24:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xb, 0x8, 0x40}, 0x40) 07:24:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:32 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x218182) 07:24:32 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x111}}, 0x20) 07:24:33 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x218182) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xc, 0x8, 0x40}, 0x40) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:33 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x218182) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xd, 0x8, 0x40}, 0x40) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 07:24:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42080, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xe, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='setgroups\x00') 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 07:24:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r4, 0x0) syz_open_procfs(r3, 0x0) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf, 0x8, 0x40}, 0x40) 07:24:33 executing program 4: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:33 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) getpid() r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r2}, 0x8) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, r3, 0x0) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x10, 0x8, 0x40}, 0x40) 07:24:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xb794, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) getpid() mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:33 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x11, 0x8, 0x40}, 0x40) 07:24:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ffffffffffffff, 0x8080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x1) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x12, 0x8, 0x40}, 0x40) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) getpid() mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ffffffffffffff, 0x8080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:33 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x13, 0x8, 0x40}, 0x40) 07:24:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x9, 0x8, 0x40}, 0x40) 07:24:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8, 0x40}, 0x40) 07:24:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ffffffffffffff, 0x8080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x14, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x9, 0x8, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ffffffffffffff, 0x8080) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x15, 0x8, 0x40}, 0x40) 07:24:34 executing program 5: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x9, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(0x0, 0x1ffffffffffffff, 0x8080) 07:24:34 executing program 5: mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x9, 0x8, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(0x0, 0x1ffffffffffffff, 0x8080) 07:24:34 executing program 5: mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8975d666740fc177, 0xffffffffffffffff, 0x0) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x0, 0x40}, 0x40) 07:24:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(0x0, 0x1ffffffffffffff, 0x8080) 07:24:34 executing program 5: mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x18, 0x8, 0x40}, 0x40) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x0, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8080) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:34 executing program 5: mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x0, 0x40}, 0x40) 07:24:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x0, 0x40}, 0x40) 07:24:34 executing program 5: mmap$qrtrtun(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1a, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x0, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1b, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x0, 0x40}, 0x40) 07:24:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:34 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1c, 0x8, 0x40}, 0x40) 07:24:34 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8}, 0x40) 07:24:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1e, 0x8, 0x40}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9, 0x8}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x21, 0x8, 0x40}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x22, 0x8, 0x40}, 0x40) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x23, 0x8, 0x40}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x180, 0x8, 0x40}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x300, 0x8, 0x40}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x16, 0x8, 0x40}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x500, 0x8, 0x40}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8}, 0x40) 07:24:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8, 0x40}, 0x40) 07:24:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x600, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1d, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2, 0x8}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x700, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1d, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x0, 0x40}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1d, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xa00, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x0, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1d, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2, 0x8}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x0, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x0, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xb00, 0x8, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x0, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xc00, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x17, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xd00, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xe00, 0x8, 0x40}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x0, 0x40}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16, 0x8}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x0, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:36 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:36 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2}, 0x40) 07:24:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x0, 0x40}, 0x40) 07:24:36 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x0, 0x40}, 0x40) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1100, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2}, 0x40) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x0, 0x40}, 0x40) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x0, 0x40}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x0, 0x40}, 0x40) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d, 0x8}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17, 0x8}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1400, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1500, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1600, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1700, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:37 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:37 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8, 0x40}, 0x40) 07:24:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8}, 0x40) 07:24:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1800, 0x8, 0x40}, 0x40) 07:24:37 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x19, 0x8}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1900, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0xf00, 0x8, 0x40}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1a00, 0x8, 0x40}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0xf00, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0xf00, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1b00, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x19, 0x8}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0xf00, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1c00, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x0, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d00, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1200, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1e00, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x0, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x1300, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1f00, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x0, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2000, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19}, 0x40) 07:24:38 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:38 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x0, 0x40}, 0x40) 07:24:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2100, 0x8, 0x40}, 0x40) 07:24:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x0, 0x40}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x0, 0x40}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x0, 0x40}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x0, 0x40}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x0, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x0, 0x40}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x0, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1000000, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x0, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2000000, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1300, 0x8}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1200, 0x8}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x3000000, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1800, 0x8, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x4000000, 0x8, 0x40}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1700, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1800, 0x8, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x5000000, 0x8, 0x40}, 0x40) 07:24:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1600, 0x8, 0x40}, 0x40) 07:24:39 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1400, 0x8, 0x40}, 0x40) 07:24:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8}, 0x40) 07:24:39 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x6000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1600, 0x8, 0x40}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x700, 0x8, 0x40}, 0x40) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8}, 0x40) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x7000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:24:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x500, 0x8, 0x40}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x15, 0x8, 0x40}, 0x40) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x8000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x900, 0x8}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x9000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2}) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8}, 0x40) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2}) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xa000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2}) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xb000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x900, 0x8}, 0x40) 07:24:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xc000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2300, 0x8, 0x40}, 0x40) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xd000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:40 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') 07:24:40 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x40}, 0x40) 07:24:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xe000000, 0x8, 0x40}, 0x40) 07:24:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8}, 0x40) 07:24:40 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900}, 0x40) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 0: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:41 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x0, 0x40}, 0x40) 07:24:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900}, 0x40) 07:24:41 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x10000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x0, 0x40}, 0x40) 07:24:41 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x900}, 0x40) 07:24:41 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x11000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x0, 0x40}, 0x40) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:24:41 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:41 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:41 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8}, 0x40) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x12000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:41 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x13000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:41 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x14000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) 07:24:41 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:41 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:24:41 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x15000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) 07:24:41 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:24:41 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) 07:24:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x16000000, 0x8, 0x40}, 0x40) 07:24:41 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) 07:24:42 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) 07:24:42 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:42 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:42 executing program 5 (fault-call:0 fault-nth:0): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x17000000, 0x8, 0x40}, 0x40) [ 2614.836996][ T3194] FAULT_INJECTION: forcing a failure. [ 2614.836996][ T3194] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.852094][ T3196] FAULT_INJECTION: forcing a failure. [ 2614.852094][ T3196] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.875905][ T3194] CPU: 0 PID: 3194 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2614.886081][ T3194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2614.896187][ T3194] Call Trace: [ 2614.899465][ T3194] dump_stack+0x137/0x19d [ 2614.903821][ T3194] should_fail+0x23c/0x250 [ 2614.908262][ T3194] __should_failslab+0x81/0x90 [ 2614.913028][ T3194] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2614.918803][ T3194] should_failslab+0x5/0x20 [ 2614.923389][ T3194] __kmalloc+0x66/0x380 [ 2614.927548][ T3194] ? path_openat+0x191f/0x21b0 [ 2614.932319][ T3194] ? __rcu_read_unlock+0x5c/0x250 [ 2614.937429][ T3194] tomoyo_realpath_from_path+0x98/0x3b0 [ 2614.943008][ T3194] tomoyo_path_number_perm+0xc1/0x2d0 [ 2614.948429][ T3194] ? __rcu_read_unlock+0x5c/0x250 [ 2614.953466][ T3194] tomoyo_file_ioctl+0x1c/0x20 [ 2614.958244][ T3194] security_file_ioctl+0x45/0x90 [ 2614.963265][ T3194] __se_sys_ioctl+0x48/0x140 [ 2614.967862][ T3194] __x64_sys_ioctl+0x3f/0x50 [ 2614.972565][ T3194] do_syscall_64+0x39/0x80 [ 2614.977010][ T3194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2614.982974][ T3194] RIP: 0033:0x465f69 07:24:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) [ 2614.986873][ T3194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.006677][ T3194] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2615.015108][ T3194] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2615.021383][ T3199] FAULT_INJECTION: forcing a failure. [ 2615.021383][ T3199] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:24:42 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) [ 2615.023083][ T3194] RDX: 0000000000000000 RSI: 0000000000008913 RDI: 0000000000000003 [ 2615.023101][ T3194] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.023115][ T3194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2615.060058][ T3194] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2615.071343][ T3199] CPU: 1 PID: 3199 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2615.081426][ T3199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.091510][ T3199] Call Trace: [ 2615.092608][ T3194] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.094787][ T3199] dump_stack+0x137/0x19d [ 2615.094816][ T3199] should_fail+0x23c/0x250 [ 2615.110229][ T3199] should_fail_usercopy+0x16/0x20 [ 2615.115278][ T3199] _copy_from_user+0x1c/0xd0 [ 2615.122366][ T3199] __do_sys_bpf+0x143/0x9990 [ 2615.126970][ T3199] ? kstrtoull+0x30e/0x350 [ 2615.131393][ T3199] ? kstrtouint_from_user+0x104/0x130 [ 2615.136772][ T3199] ? __rcu_read_unlock+0x5c/0x250 [ 2615.141808][ T3199] ? fsnotify_perm+0x59/0x2e0 [ 2615.146493][ T3199] ? __fsnotify_parent+0x32f/0x430 [ 2615.151610][ T3199] ? vfs_write+0x572/0x7e0 [ 2615.156083][ T3199] ? __fget_light+0x219/0x260 [ 2615.160773][ T3199] ? fput+0x2d/0x130 [ 2615.164716][ T3199] ? ksys_write+0x157/0x180 [ 2615.169228][ T3199] __x64_sys_bpf+0x3d/0x50 [ 2615.173708][ T3199] do_syscall_64+0x39/0x80 [ 2615.178130][ T3199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2615.184086][ T3199] RIP: 0033:0x465f69 [ 2615.187984][ T3199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.207725][ T3199] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2615.216840][ T3199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2615.225163][ T3199] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 07:24:42 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) [ 2615.233149][ T3199] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.241164][ T3199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2615.249147][ T3199] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 [ 2615.257132][ T3196] CPU: 0 PID: 3196 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2615.267211][ T3196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.277342][ T3196] Call Trace: [ 2615.280625][ T3196] dump_stack+0x137/0x19d 07:24:42 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) [ 2615.284959][ T3196] should_fail+0x23c/0x250 [ 2615.289394][ T3196] __should_failslab+0x81/0x90 [ 2615.294162][ T3196] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2615.299915][ T3196] should_failslab+0x5/0x20 [ 2615.304587][ T3196] __kmalloc+0x66/0x380 [ 2615.308795][ T3196] ? path_openat+0x191f/0x21b0 [ 2615.313552][ T3196] ? __rcu_read_unlock+0x5c/0x250 [ 2615.318610][ T3196] tomoyo_realpath_from_path+0x98/0x3b0 [ 2615.324160][ T3196] tomoyo_path_number_perm+0xc1/0x2d0 [ 2615.329615][ T3196] ? __rcu_read_unlock+0x5c/0x250 [ 2615.334641][ T3196] tomoyo_file_ioctl+0x1c/0x20 [ 2615.339394][ T3196] security_file_ioctl+0x45/0x90 [ 2615.344354][ T3196] __se_sys_ioctl+0x48/0x140 [ 2615.348945][ T3196] __x64_sys_ioctl+0x3f/0x50 [ 2615.353919][ T3196] do_syscall_64+0x39/0x80 [ 2615.358388][ T3196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2615.364270][ T3196] RIP: 0033:0x465f69 [ 2615.368147][ T3196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:24:42 executing program 5 (fault-call:0 fault-nth:1): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2615.388494][ T3196] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2615.396910][ T3196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2615.405172][ T3196] RDX: 0000000000000000 RSI: 0000000080086301 RDI: 0000000000000003 [ 2615.413134][ T3196] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.421179][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2615.429136][ T3196] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 07:24:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x18000000, 0x8, 0x40}, 0x40) 07:24:42 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) [ 2615.443009][ T3196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.498581][ T3209] FAULT_INJECTION: forcing a failure. [ 2615.498581][ T3209] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.519549][ T3213] FAULT_INJECTION: forcing a failure. [ 2615.519549][ T3213] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.544233][ T3209] CPU: 1 PID: 3209 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2615.554365][ T3209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.564842][ T3209] Call Trace: [ 2615.568141][ T3209] dump_stack+0x137/0x19d [ 2615.568645][ T3216] FAULT_INJECTION: forcing a failure. [ 2615.568645][ T3216] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.572483][ T3209] should_fail+0x23c/0x250 [ 2615.572511][ T3209] __should_failslab+0x81/0x90 [ 2615.594499][ T3209] ? tomoyo_encode2+0x1d3/0x350 [ 2615.599422][ T3209] should_failslab+0x5/0x20 [ 2615.603933][ T3209] __kmalloc+0x66/0x380 [ 2615.608125][ T3209] tomoyo_encode2+0x1d3/0x350 [ 2615.612908][ T3209] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2615.618552][ T3209] tomoyo_path_number_perm+0xc1/0x2d0 [ 2615.623939][ T3209] ? __rcu_read_unlock+0x5c/0x250 [ 2615.628980][ T3209] tomoyo_file_ioctl+0x1c/0x20 [ 2615.633754][ T3209] security_file_ioctl+0x45/0x90 [ 2615.638842][ T3209] __se_sys_ioctl+0x48/0x140 [ 2615.643443][ T3209] __x64_sys_ioctl+0x3f/0x50 [ 2615.648036][ T3209] do_syscall_64+0x39/0x80 [ 2615.652455][ T3209] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2615.658353][ T3209] RIP: 0033:0x465f69 [ 2615.662247][ T3209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.681905][ T3209] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2615.690517][ T3209] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 07:24:42 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:42 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:42 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2615.698492][ T3209] RDX: 0000000000000000 RSI: 0000000000008913 RDI: 0000000000000003 [ 2615.706564][ T3209] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.714539][ T3209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2615.722514][ T3209] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2615.735829][ T3216] CPU: 0 PID: 3216 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2615.745932][ T3216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.755991][ T3216] Call Trace: [ 2615.759327][ T3216] dump_stack+0x137/0x19d [ 2615.763663][ T3216] should_fail+0x23c/0x250 [ 2615.768121][ T3216] __should_failslab+0x81/0x90 [ 2615.772930][ T3216] ? tomoyo_encode2+0x1d3/0x350 [ 2615.777820][ T3216] should_failslab+0x5/0x20 [ 2615.782389][ T3216] __kmalloc+0x66/0x380 [ 2615.786550][ T3216] tomoyo_encode2+0x1d3/0x350 [ 2615.791237][ T3216] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2615.796879][ T3216] tomoyo_path_number_perm+0xc1/0x2d0 [ 2615.802433][ T3216] ? __rcu_read_unlock+0x5c/0x250 [ 2615.807511][ T3216] tomoyo_file_ioctl+0x1c/0x20 [ 2615.812328][ T3216] security_file_ioctl+0x45/0x90 [ 2615.817431][ T3216] __se_sys_ioctl+0x48/0x140 [ 2615.822129][ T3216] __x64_sys_ioctl+0x3f/0x50 [ 2615.826759][ T3216] do_syscall_64+0x39/0x80 [ 2615.831176][ T3216] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2615.837136][ T3216] RIP: 0033:0x465f69 [ 2615.841032][ T3216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.860641][ T3216] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2615.869056][ T3216] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2615.877101][ T3216] RDX: 0000000000000000 RSI: 0000000080086301 RDI: 0000000000000003 [ 2615.885076][ T3216] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 07:24:43 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) [ 2615.893074][ T3216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2615.901160][ T3216] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2615.915934][ T3213] CPU: 1 PID: 3213 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2615.926077][ T3213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2615.936143][ T3213] Call Trace: [ 2615.939423][ T3213] dump_stack+0x137/0x19d [ 2615.943756][ T3213] should_fail+0x23c/0x250 [ 2615.948190][ T3213] __should_failslab+0x81/0x90 [ 2615.950491][ T3209] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.953001][ T3213] ? htab_map_alloc+0x65/0xc80 [ 2615.953030][ T3213] should_failslab+0x5/0x20 [ 2615.960432][ T3216] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2615.964436][ T3213] kmem_cache_alloc_trace+0x49/0x340 [ 2615.964463][ T3213] htab_map_alloc+0x65/0xc80 [ 2615.985457][ T3213] ? capable+0x85/0xb0 [ 2615.989531][ T3213] ? htab_map_alloc_check+0x282/0x2c0 [ 2615.994904][ T3213] __do_sys_bpf+0x420c/0x9990 [ 2615.999673][ T3213] ? kstrtoull+0x30e/0x350 [ 2616.004101][ T3213] ? kstrtouint_from_user+0x104/0x130 [ 2616.009530][ T3213] ? __rcu_read_unlock+0x5c/0x250 [ 2616.014678][ T3213] ? fsnotify_perm+0x59/0x2e0 [ 2616.019417][ T3213] ? __fsnotify_parent+0x32f/0x430 [ 2616.024537][ T3213] ? vfs_write+0x572/0x7e0 [ 2616.029039][ T3213] ? __fget_light+0x219/0x260 [ 2616.033814][ T3213] ? fput+0x2d/0x130 [ 2616.037713][ T3213] ? ksys_write+0x157/0x180 [ 2616.042222][ T3213] __x64_sys_bpf+0x3d/0x50 [ 2616.046732][ T3213] do_syscall_64+0x39/0x80 [ 2616.051152][ T3213] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2616.057093][ T3213] RIP: 0033:0x465f69 [ 2616.060986][ T3213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.062402][ T3229] FAULT_INJECTION: forcing a failure. [ 2616.062402][ T3229] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:24:43 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x19000000, 0x8, 0x40}, 0x40) [ 2616.080666][ T3213] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2616.080693][ T3213] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2616.080705][ T3213] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2616.080716][ T3213] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.080728][ T3213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2616.134704][ T3213] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 07:24:43 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) [ 2616.142692][ T3229] CPU: 0 PID: 3229 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2616.153109][ T3229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2616.163170][ T3229] Call Trace: [ 2616.166491][ T3229] dump_stack+0x137/0x19d [ 2616.170937][ T3229] should_fail+0x23c/0x250 [ 2616.175355][ T3229] ? tsan.module_ctor+0x10/0x10 [ 2616.180273][ T3229] should_fail_usercopy+0x16/0x20 [ 2616.185322][ T3229] _copy_from_user+0x1c/0xd0 [ 2616.189937][ T3229] ? tsan.module_ctor+0x10/0x10 [ 2616.194784][ T3229] drm_ioctl+0x373/0x5e0 [ 2616.199052][ T3229] ? tsan.module_ctor+0x10/0x10 [ 2616.204038][ T3229] ? do_vfs_ioctl+0x4f7/0xec0 [ 2616.208709][ T3229] ? tomoyo_file_ioctl+0x1c/0x20 [ 2616.213648][ T3229] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2616.218721][ T3229] __se_sys_ioctl+0xcb/0x140 [ 2616.223311][ T3229] __x64_sys_ioctl+0x3f/0x50 [ 2616.227970][ T3229] do_syscall_64+0x39/0x80 [ 2616.232479][ T3229] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2616.238416][ T3229] RIP: 0033:0x465f69 [ 2616.242333][ T3229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.262017][ T3229] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2616.270415][ T3229] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2616.278372][ T3229] RDX: 0000000000000000 RSI: 0000000080086301 RDI: 0000000000000003 [ 2616.286334][ T3229] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.294365][ T3229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:24:43 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1a000000, 0x8, 0x40}, 0x40) [ 2616.302516][ T3229] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 07:24:43 executing program 5 (fault-call:0 fault-nth:2): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:43 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) 07:24:43 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) 07:24:43 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:43 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1b000000, 0x8, 0x40}, 0x40) 07:24:43 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) [ 2616.419268][ T3241] FAULT_INJECTION: forcing a failure. [ 2616.419268][ T3241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2616.438663][ T3247] FAULT_INJECTION: forcing a failure. [ 2616.438663][ T3247] name failslab, interval 1, probability 0, space 0, times 0 [ 2616.480397][ T3241] CPU: 1 PID: 3241 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2616.481012][ T3250] FAULT_INJECTION: forcing a failure. [ 2616.481012][ T3250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2616.490631][ T3241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2616.490650][ T3241] Call Trace: [ 2616.490659][ T3241] dump_stack+0x137/0x19d [ 2616.521714][ T3241] should_fail+0x23c/0x250 [ 2616.526203][ T3241] ? drm_getclient+0xc0/0xc0 [ 2616.530883][ T3241] should_fail_usercopy+0x16/0x20 [ 2616.535923][ T3241] _copy_from_user+0x1c/0xd0 [ 2616.540550][ T3241] ? drm_getclient+0xc0/0xc0 [ 2616.545180][ T3241] drm_ioctl+0x373/0x5e0 [ 2616.549465][ T3241] ? drm_getclient+0xc0/0xc0 [ 2616.554100][ T3241] ? do_vfs_ioctl+0x4f7/0xec0 [ 2616.558901][ T3241] ? tomoyo_file_ioctl+0x1c/0x20 [ 2616.563856][ T3241] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2616.568905][ T3241] __se_sys_ioctl+0xcb/0x140 [ 2616.573617][ T3241] __x64_sys_ioctl+0x3f/0x50 [ 2616.578380][ T3241] do_syscall_64+0x39/0x80 [ 2616.582834][ T3241] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2616.588740][ T3241] RIP: 0033:0x465f69 [ 2616.592648][ T3241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.612263][ T3241] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2616.620703][ T3241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 07:24:43 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) [ 2616.628681][ T3241] RDX: 0000000000000000 RSI: 0000000000008913 RDI: 0000000000000003 [ 2616.636660][ T3241] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.644648][ T3241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2616.652679][ T3241] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2616.660738][ T3247] CPU: 0 PID: 3247 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2616.670822][ T3247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2616.680895][ T3247] Call Trace: [ 2616.684186][ T3247] dump_stack+0x137/0x19d [ 2616.688531][ T3247] should_fail+0x23c/0x250 [ 2616.693076][ T3247] __should_failslab+0x81/0x90 [ 2616.697844][ T3247] should_failslab+0x5/0x20 [ 2616.702432][ T3247] kmem_cache_alloc_node_trace+0x5b/0x310 [ 2616.708285][ T3247] ? __kmalloc_node+0x30/0x40 [ 2616.713002][ T3247] __kmalloc_node+0x30/0x40 [ 2616.717575][ T3247] __bpf_map_area_alloc+0x91/0x120 [ 2616.722757][ T3247] bpf_map_area_alloc+0x18/0x20 [ 2616.727618][ T3247] htab_map_alloc+0x249/0xc80 [ 2616.732319][ T3247] ? capable+0x85/0xb0 [ 2616.736493][ T3247] ? htab_map_alloc_check+0x282/0x2c0 [ 2616.741940][ T3247] __do_sys_bpf+0x420c/0x9990 [ 2616.746631][ T3247] ? kstrtoull+0x30e/0x350 [ 2616.751056][ T3247] ? kstrtouint_from_user+0x104/0x130 [ 2616.756469][ T3247] ? __rcu_read_unlock+0x5c/0x250 [ 2616.761505][ T3247] ? fsnotify_perm+0x59/0x2e0 [ 2616.766296][ T3247] ? __fsnotify_parent+0x32f/0x430 [ 2616.771415][ T3247] ? vfs_write+0x572/0x7e0 [ 2616.775908][ T3247] ? __fget_light+0x219/0x260 [ 2616.780614][ T3247] ? fput+0x2d/0x130 [ 2616.784514][ T3247] ? ksys_write+0x157/0x180 [ 2616.789033][ T3247] __x64_sys_bpf+0x3d/0x50 [ 2616.793512][ T3247] do_syscall_64+0x39/0x80 [ 2616.798000][ T3247] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2616.804038][ T3247] RIP: 0033:0x465f69 [ 2616.807944][ T3247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.827816][ T3247] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2616.836326][ T3247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2616.844336][ T3247] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2616.852336][ T3247] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2616.860317][ T3247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2616.868400][ T3247] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 [ 2616.876435][ T3250] CPU: 1 PID: 3250 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2616.886523][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2616.896590][ T3250] Call Trace: [ 2616.899873][ T3250] dump_stack+0x137/0x19d [ 2616.904303][ T3250] should_fail+0x23c/0x250 [ 2616.908726][ T3250] should_fail_usercopy+0x16/0x20 [ 2616.913757][ T3250] _copy_to_user+0x1c/0x90 [ 2616.918188][ T3250] drm_getunique+0xc4/0x140 [ 2616.922717][ T3250] drm_ioctl_kernel+0x22a/0x2b0 [ 2616.927588][ T3250] ? tsan.module_ctor+0x10/0x10 [ 2616.932473][ T3250] drm_ioctl+0x406/0x5e0 [ 2616.936731][ T3250] ? tsan.module_ctor+0x10/0x10 [ 2616.941685][ T3250] ? do_vfs_ioctl+0x4f7/0xec0 [ 2616.946379][ T3250] ? tomoyo_file_ioctl+0x1c/0x20 [ 2616.951347][ T3250] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2616.956390][ T3250] __se_sys_ioctl+0xcb/0x140 [ 2616.960995][ T3250] __x64_sys_ioctl+0x3f/0x50 [ 2616.965601][ T3250] do_syscall_64+0x39/0x80 [ 2616.970095][ T3250] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2616.976002][ T3250] RIP: 0033:0x465f69 [ 2616.979978][ T3250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2616.999597][ T3250] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2617.008024][ T3250] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2617.016100][ T3250] RDX: 0000000000000000 RSI: 0000000080086301 RDI: 0000000000000003 [ 2617.024087][ T3250] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 07:24:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1c000000, 0x8, 0x40}, 0x40) 07:24:44 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) [ 2617.032096][ T3250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.040076][ T3250] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2617.054213][ T3256] FAULT_INJECTION: forcing a failure. [ 2617.054213][ T3256] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:24:44 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:44 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) [ 2617.114385][ T3256] CPU: 0 PID: 3256 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2617.124489][ T3256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2617.134580][ T3256] Call Trace: [ 2617.137898][ T3256] dump_stack+0x137/0x19d [ 2617.142300][ T3256] should_fail+0x23c/0x250 [ 2617.146805][ T3256] should_fail_usercopy+0x16/0x20 [ 2617.151840][ T3256] _copy_to_user+0x1c/0x90 [ 2617.156274][ T3256] simple_read_from_buffer+0xab/0x120 07:24:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1d000000, 0x8, 0x40}, 0x40) [ 2617.161662][ T3256] proc_fail_nth_read+0xf6/0x140 [ 2617.166628][ T3256] ? rw_verify_area+0x136/0x250 [ 2617.171502][ T3256] ? proc_fault_inject_write+0x200/0x200 [ 2617.177214][ T3256] vfs_read+0x154/0x5d0 [ 2617.181421][ T3256] ? __fget_light+0x219/0x260 [ 2617.186209][ T3256] ksys_read+0xce/0x180 [ 2617.190448][ T3256] __x64_sys_read+0x3e/0x50 [ 2617.194996][ T3256] do_syscall_64+0x39/0x80 [ 2617.199427][ T3256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2617.205397][ T3256] RIP: 0033:0x4191ec [ 2617.206723][ T3265] FAULT_INJECTION: forcing a failure. [ 2617.206723][ T3265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2617.209296][ T3256] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2617.209318][ T3256] RSP: 002b:00007fe12117c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2617.250430][ T3256] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 2617.258407][ T3256] RDX: 000000000000000f RSI: 00007fe12117c1e0 RDI: 0000000000000003 [ 2617.266391][ T3256] RBP: 00007fe12117c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.274458][ T3256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.282440][ T3256] R13: 00007fffcd316aaf R14: 00007fe12117c300 R15: 0000000000022000 [ 2617.290488][ T3265] CPU: 1 PID: 3265 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2617.300661][ T3265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2617.310796][ T3265] Call Trace: [ 2617.314075][ T3265] dump_stack+0x137/0x19d [ 2617.318432][ T3265] should_fail+0x23c/0x250 [ 2617.322955][ T3265] should_fail_usercopy+0x16/0x20 [ 2617.328144][ T3265] _copy_to_user+0x1c/0x90 [ 2617.332589][ T3265] drm_ioctl+0x42c/0x5e0 [ 2617.336844][ T3265] ? tsan.module_ctor+0x10/0x10 [ 2617.341705][ T3265] ? do_vfs_ioctl+0x4f7/0xec0 [ 2617.346392][ T3265] ? tomoyo_file_ioctl+0x1c/0x20 [ 2617.351403][ T3265] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2617.352914][ T3272] FAULT_INJECTION: forcing a failure. [ 2617.352914][ T3272] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.356450][ T3265] __se_sys_ioctl+0xcb/0x140 [ 2617.356480][ T3265] __x64_sys_ioctl+0x3f/0x50 [ 2617.378252][ T3265] do_syscall_64+0x39/0x80 [ 2617.382693][ T3265] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2617.388695][ T3265] RIP: 0033:0x465f69 [ 2617.392599][ T3265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:24:44 executing program 5 (fault-call:0 fault-nth:3): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1e000000, 0x8, 0x40}, 0x40) 07:24:44 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2617.412487][ T3265] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2617.420911][ T3265] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2617.429068][ T3265] RDX: 0000000000000000 RSI: 0000000080086301 RDI: 0000000000000003 [ 2617.437047][ T3265] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.445118][ T3265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.453099][ T3265] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 07:24:44 executing program 0 (fault-call:1 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:44 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) [ 2617.461255][ T3272] CPU: 0 PID: 3272 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2617.471350][ T3272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2617.481413][ T3272] Call Trace: [ 2617.484692][ T3272] dump_stack+0x137/0x19d [ 2617.489044][ T3272] should_fail+0x23c/0x250 [ 2617.493547][ T3272] __should_failslab+0x81/0x90 [ 2617.498354][ T3272] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2617.504127][ T3272] should_failslab+0x5/0x20 [ 2617.508657][ T3272] __kmalloc+0x66/0x380 07:24:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x1f000000, 0x8, 0x40}, 0x40) [ 2617.512855][ T3272] ? path_openat+0x191f/0x21b0 [ 2617.517684][ T3272] ? __rcu_read_unlock+0x5c/0x250 [ 2617.522844][ T3272] tomoyo_realpath_from_path+0x98/0x3b0 [ 2617.528460][ T3272] tomoyo_path_number_perm+0xc1/0x2d0 [ 2617.533975][ T3272] ? __rcu_read_unlock+0x5c/0x250 [ 2617.539141][ T3272] tomoyo_file_ioctl+0x1c/0x20 [ 2617.543934][ T3272] security_file_ioctl+0x45/0x90 [ 2617.548902][ T3272] __se_sys_ioctl+0x48/0x140 [ 2617.553855][ T3272] __x64_sys_ioctl+0x3f/0x50 [ 2617.558458][ T3272] do_syscall_64+0x39/0x80 [ 2617.558625][ T3274] FAULT_INJECTION: forcing a failure. [ 2617.558625][ T3274] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.562877][ T3272] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2617.581356][ T3272] RIP: 0033:0x465f69 [ 2617.585606][ T3272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2617.605255][ T3272] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2617.613761][ T3272] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2617.621738][ T3272] RDX: 0000000000000000 RSI: 0000000000004c03 RDI: 0000000000000003 [ 2617.629709][ T3272] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.637737][ T3272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2617.645714][ T3272] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 [ 2617.653760][ T3274] CPU: 1 PID: 3274 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 07:24:44 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2617.656235][ T3272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2617.663840][ T3274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2617.663854][ T3274] Call Trace: [ 2617.663862][ T3274] dump_stack+0x137/0x19d [ 2617.688457][ T3274] should_fail+0x23c/0x250 [ 2617.692878][ T3274] __should_failslab+0x81/0x90 [ 2617.697650][ T3274] should_failslab+0x5/0x20 [ 2617.702226][ T3274] kmem_cache_alloc_node_trace+0x5b/0x310 [ 2617.707926][ T3274] ? __kmalloc_node+0x30/0x40 [ 2617.712660][ T3274] __kmalloc_node+0x30/0x40 [ 2617.717157][ T3274] __bpf_map_area_alloc+0x91/0x120 [ 2617.722353][ T3274] bpf_map_area_alloc+0x18/0x20 [ 2617.727208][ T3274] htab_map_alloc+0x663/0xc80 [ 2617.731920][ T3274] ? htab_map_alloc_check+0x282/0x2c0 [ 2617.737298][ T3274] __do_sys_bpf+0x420c/0x9990 [ 2617.742054][ T3274] ? kstrtoull+0x30e/0x350 [ 2617.746474][ T3274] ? kstrtouint_from_user+0x104/0x130 [ 2617.751833][ T3274] ? __rcu_read_unlock+0x5c/0x250 [ 2617.756842][ T3274] ? fsnotify_perm+0x59/0x2e0 [ 2617.761514][ T3274] ? __fsnotify_parent+0x32f/0x430 [ 2617.766612][ T3274] ? vfs_write+0x572/0x7e0 [ 2617.771016][ T3274] ? __fget_light+0x219/0x260 [ 2617.775723][ T3274] ? fput+0x2d/0x130 [ 2617.779608][ T3274] ? ksys_write+0x157/0x180 [ 2617.784155][ T3274] __x64_sys_bpf+0x3d/0x50 [ 2617.788572][ T3274] do_syscall_64+0x39/0x80 [ 2617.792980][ T3274] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2617.798929][ T3274] RIP: 0033:0x465f69 [ 2617.802927][ T3274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2617.822563][ T3274] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2617.830972][ T3274] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2617.838960][ T3274] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2617.846927][ T3274] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2617.854883][ T3274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:24:45 executing program 5 (fault-call:0 fault-nth:4): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2617.862928][ T3274] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 [ 2617.923095][ T3283] FAULT_INJECTION: forcing a failure. [ 2617.923095][ T3283] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.946703][ T3286] FAULT_INJECTION: forcing a failure. [ 2617.946703][ T3286] name failslab, interval 1, probability 0, space 0, times 0 [ 2617.950680][ T3284] FAULT_INJECTION: forcing a failure. [ 2617.950680][ T3284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2617.959444][ T3286] CPU: 1 PID: 3286 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2617.959472][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2617.992648][ T3286] Call Trace: [ 2617.995928][ T3286] dump_stack+0x137/0x19d [ 2618.000289][ T3286] should_fail+0x23c/0x250 [ 2618.004744][ T3286] ? radix_tree_node_alloc+0x9c/0x1f0 [ 2618.010376][ T3286] __should_failslab+0x81/0x90 [ 2618.015140][ T3286] should_failslab+0x5/0x20 [ 2618.019655][ T3286] kmem_cache_alloc+0x46/0x320 [ 2618.024462][ T3286] ? pcpu_alloc+0x103d/0x1090 [ 2618.029148][ T3286] radix_tree_node_alloc+0x9c/0x1f0 [ 2618.034344][ T3286] idr_get_free+0x22a/0x5d0 [ 2618.038861][ T3286] idr_alloc_cyclic+0xe3/0x2d0 [ 2618.043650][ T3286] ? __radix_tree_preload+0x19e/0x1c0 [ 2618.049735][ T3286] __do_sys_bpf+0x8b96/0x9990 [ 2618.054489][ T3286] ? kstrtoull+0x30e/0x350 [ 2618.058950][ T3286] ? kstrtouint_from_user+0x104/0x130 [ 2618.064324][ T3286] ? __rcu_read_unlock+0x5c/0x250 [ 2618.069349][ T3286] ? fsnotify_perm+0x59/0x2e0 [ 2618.074038][ T3286] ? __fsnotify_parent+0x32f/0x430 [ 2618.079237][ T3286] ? vfs_write+0x572/0x7e0 [ 2618.083656][ T3286] ? __fget_light+0x219/0x260 [ 2618.088331][ T3286] ? fput+0x2d/0x130 [ 2618.092235][ T3286] ? ksys_write+0x157/0x180 [ 2618.096740][ T3286] __x64_sys_bpf+0x3d/0x50 [ 2618.101161][ T3286] do_syscall_64+0x39/0x80 [ 2618.105591][ T3286] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.111532][ T3286] RIP: 0033:0x465f69 [ 2618.115418][ T3286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.135041][ T3286] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2618.143464][ T3286] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2618.151438][ T3286] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2618.159402][ T3286] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.167376][ T3286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.175344][ T3286] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 [ 2618.183406][ T3284] CPU: 0 PID: 3284 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2618.193484][ T3284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2618.203541][ T3284] Call Trace: [ 2618.206902][ T3284] dump_stack+0x137/0x19d [ 2618.211236][ T3284] should_fail+0x23c/0x250 [ 2618.215652][ T3284] should_fail_usercopy+0x16/0x20 [ 2618.220674][ T3284] _copy_to_user+0x1c/0x90 [ 2618.225095][ T3284] simple_read_from_buffer+0xab/0x120 [ 2618.230494][ T3284] proc_fail_nth_read+0xf6/0x140 [ 2618.235435][ T3284] ? rw_verify_area+0x136/0x250 [ 2618.240289][ T3284] ? proc_fault_inject_write+0x200/0x200 [ 2618.245922][ T3284] vfs_read+0x154/0x5d0 [ 2618.250123][ T3284] ? __fget_light+0x219/0x260 [ 2618.254804][ T3284] ksys_read+0xce/0x180 [ 2618.259023][ T3284] __x64_sys_read+0x3e/0x50 [ 2618.263529][ T3284] do_syscall_64+0x39/0x80 [ 2618.267972][ T3284] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.273870][ T3284] RIP: 0033:0x4191ec [ 2618.277760][ T3284] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2618.297369][ T3284] RSP: 002b:00007ff3f0e88170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2618.305785][ T3284] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 2618.313795][ T3284] RDX: 000000000000000f RSI: 00007ff3f0e881e0 RDI: 0000000000000004 07:24:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, 0x0) [ 2618.321793][ T3284] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.329857][ T3284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.337876][ T3284] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2618.346224][ T3283] CPU: 1 PID: 3283 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2618.356317][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2618.366365][ T3283] Call Trace: [ 2618.369673][ T3283] dump_stack+0x137/0x19d [ 2618.374040][ T3283] should_fail+0x23c/0x250 [ 2618.378463][ T3283] __should_failslab+0x81/0x90 [ 2618.383227][ T3283] ? tomoyo_encode2+0x1d3/0x350 [ 2618.388140][ T3283] should_failslab+0x5/0x20 [ 2618.392648][ T3283] __kmalloc+0x66/0x380 [ 2618.396814][ T3283] tomoyo_encode2+0x1d3/0x350 [ 2618.402483][ T3283] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2618.408126][ T3283] tomoyo_path_number_perm+0xc1/0x2d0 [ 2618.413516][ T3283] ? __rcu_read_unlock+0x5c/0x250 [ 2618.418552][ T3283] tomoyo_file_ioctl+0x1c/0x20 [ 2618.423426][ T3283] security_file_ioctl+0x45/0x90 [ 2618.428370][ T3283] __se_sys_ioctl+0x48/0x140 [ 2618.432976][ T3283] __x64_sys_ioctl+0x3f/0x50 [ 2618.437693][ T3283] do_syscall_64+0x39/0x80 [ 2618.442108][ T3283] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.448007][ T3283] RIP: 0033:0x465f69 [ 2618.451896][ T3283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:24:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, 0x0) 07:24:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) [ 2618.471524][ T3283] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2618.479944][ T3283] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2618.488003][ T3283] RDX: 0000000000000000 RSI: 0000000000004c03 RDI: 0000000000000003 [ 2618.496018][ T3283] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.504186][ T3283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.512163][ T3283] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 07:24:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x20000000, 0x8, 0x40}, 0x40) 07:24:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) [ 2618.537792][ T3283] ERROR: Out of memory at tomoyo_realpath_from_path. 07:24:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) 07:24:45 executing program 5 (fault-call:0 fault-nth:5): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, 0x0) 07:24:45 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x21000000, 0x8, 0x40}, 0x40) [ 2618.661775][ T3300] FAULT_INJECTION: forcing a failure. [ 2618.661775][ T3300] name failslab, interval 1, probability 0, space 0, times 0 [ 2618.674538][ T3300] CPU: 1 PID: 3300 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2618.684614][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2618.694701][ T3300] Call Trace: [ 2618.697986][ T3300] dump_stack+0x137/0x19d [ 2618.702340][ T3300] should_fail+0x23c/0x250 [ 2618.706772][ T3300] ? radix_tree_node_alloc+0x9c/0x1f0 [ 2618.708913][ T3306] FAULT_INJECTION: forcing a failure. [ 2618.708913][ T3306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2618.712179][ T3300] __should_failslab+0x81/0x90 [ 2618.712206][ T3300] should_failslab+0x5/0x20 [ 2618.734446][ T3300] kmem_cache_alloc+0x46/0x320 [ 2618.739286][ T3300] ? radix_tree_node_alloc+0x9c/0x1f0 [ 2618.744659][ T3300] radix_tree_node_alloc+0x9c/0x1f0 [ 2618.749931][ T3300] idr_get_free+0x22a/0x5d0 [ 2618.754495][ T3300] idr_alloc_cyclic+0xe3/0x2d0 [ 2618.759272][ T3300] ? __radix_tree_preload+0x19e/0x1c0 [ 2618.764649][ T3300] __do_sys_bpf+0x8b96/0x9990 [ 2618.769403][ T3300] ? kstrtoull+0x30e/0x350 [ 2618.773828][ T3300] ? kstrtouint_from_user+0x104/0x130 [ 2618.779218][ T3300] ? __rcu_read_unlock+0x5c/0x250 [ 2618.784252][ T3300] ? fsnotify_perm+0x59/0x2e0 [ 2618.788947][ T3300] ? __fsnotify_parent+0x32f/0x430 [ 2618.794136][ T3300] ? vfs_write+0x572/0x7e0 [ 2618.798575][ T3300] ? __fget_light+0x219/0x260 [ 2618.803271][ T3300] ? fput+0x2d/0x130 [ 2618.807266][ T3300] ? ksys_write+0x157/0x180 [ 2618.811771][ T3300] __x64_sys_bpf+0x3d/0x50 [ 2618.816316][ T3300] do_syscall_64+0x39/0x80 [ 2618.820727][ T3300] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2618.826626][ T3300] RIP: 0033:0x465f69 [ 2618.830525][ T3300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2618.850134][ T3300] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2618.858569][ T3300] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2618.866544][ T3300] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2618.874519][ T3300] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2618.882515][ T3300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2618.890486][ T3300] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 [ 2618.905723][ T3306] CPU: 0 PID: 3306 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2618.915814][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2618.925871][ T3306] Call Trace: [ 2618.929155][ T3306] dump_stack+0x137/0x19d [ 2618.933489][ T3306] should_fail+0x23c/0x250 [ 2618.937902][ T3306] ? drm_pci_set_busid+0x120/0x120 [ 2618.943019][ T3306] should_fail_usercopy+0x16/0x20 [ 2618.948045][ T3306] _copy_from_user+0x1c/0xd0 [ 2618.952635][ T3306] ? drm_pci_set_busid+0x120/0x120 [ 2618.957752][ T3306] drm_ioctl+0x373/0x5e0 [ 2618.962026][ T3306] ? drm_pci_set_busid+0x120/0x120 [ 2618.967235][ T3306] ? do_vfs_ioctl+0x4f7/0xec0 [ 2618.972013][ T3306] ? tomoyo_file_ioctl+0x1c/0x20 [ 2618.976966][ T3306] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2618.982068][ T3306] __se_sys_ioctl+0xcb/0x140 [ 2618.986708][ T3306] __x64_sys_ioctl+0x3f/0x50 [ 2618.991428][ T3306] do_syscall_64+0x39/0x80 [ 2618.995916][ T3306] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2619.001818][ T3306] RIP: 0033:0x465f69 [ 2619.005718][ T3306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.025327][ T3306] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2619.033746][ T3306] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2619.041722][ T3306] RDX: 0000000000000000 RSI: 0000000000004c03 RDI: 0000000000000003 [ 2619.049699][ T3306] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 07:24:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x22000000, 0x8, 0x40}, 0x40) 07:24:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x1261, 0x0) 07:24:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) 07:24:46 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2619.057675][ T3306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2619.065653][ T3306] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 07:24:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) 07:24:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) [ 2619.164403][ T3319] FAULT_INJECTION: forcing a failure. [ 2619.164403][ T3319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.180513][ T3319] CPU: 0 PID: 3319 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2619.190784][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2619.200841][ T3319] Call Trace: [ 2619.204119][ T3319] dump_stack+0x137/0x19d [ 2619.208530][ T3319] should_fail+0x23c/0x250 07:24:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x23000000, 0x8, 0x40}, 0x40) [ 2619.212952][ T3319] should_fail_usercopy+0x16/0x20 [ 2619.217981][ T3319] _copy_to_user+0x1c/0x90 [ 2619.222402][ T3319] drm_ioctl+0x42c/0x5e0 [ 2619.226686][ T3319] ? drm_pci_set_busid+0x120/0x120 [ 2619.231810][ T3319] ? do_vfs_ioctl+0x4f7/0xec0 [ 2619.236517][ T3319] ? tomoyo_file_ioctl+0x1c/0x20 [ 2619.241521][ T3319] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2619.246590][ T3319] __se_sys_ioctl+0xcb/0x140 [ 2619.251197][ T3319] __x64_sys_ioctl+0x3f/0x50 [ 2619.255805][ T3319] do_syscall_64+0x39/0x80 07:24:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4cce, 0x0) [ 2619.260227][ T3319] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2619.266126][ T3319] RIP: 0033:0x465f69 [ 2619.270190][ T3319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.289800][ T3319] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2619.298262][ T3319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2619.306279][ T3319] RDX: 0000000000000000 RSI: 0000000000004c03 RDI: 0000000000000003 07:24:46 executing program 5 (fault-call:0 fault-nth:6): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x80010000, 0x8, 0x40}, 0x40) 07:24:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 07:24:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 07:24:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x1261, 0x0) 07:24:46 executing program 1 (fault-call:1 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2619.314274][ T3319] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.322248][ T3319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2619.330225][ T3319] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 07:24:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x1269, 0x0) 07:24:46 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, 0x0) 07:24:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x78}, 0x40) [ 2619.428898][ T3335] FAULT_INJECTION: forcing a failure. [ 2619.428898][ T3335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2619.441869][ T3338] FAULT_INJECTION: forcing a failure. [ 2619.441869][ T3338] name failslab, interval 1, probability 0, space 0, times 0 07:24:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, 0x0) [ 2619.482893][ T3335] CPU: 0 PID: 3335 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2619.493962][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2619.504084][ T3335] Call Trace: [ 2619.507364][ T3335] dump_stack+0x137/0x19d [ 2619.511828][ T3335] should_fail+0x23c/0x250 [ 2619.516333][ T3335] should_fail_usercopy+0x16/0x20 [ 2619.521363][ T3335] _copy_to_user+0x1c/0x90 [ 2619.525819][ T3335] simple_read_from_buffer+0xab/0x120 07:24:46 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x20001300}, 0x40) [ 2619.531262][ T3335] proc_fail_nth_read+0xf6/0x140 [ 2619.536214][ T3335] ? rw_verify_area+0x136/0x250 [ 2619.541075][ T3335] ? proc_fault_inject_write+0x200/0x200 [ 2619.546717][ T3335] vfs_read+0x154/0x5d0 [ 2619.550886][ T3335] ? __fget_light+0x219/0x260 [ 2619.555578][ T3335] ksys_read+0xce/0x180 [ 2619.559761][ T3335] __x64_sys_read+0x3e/0x50 [ 2619.564274][ T3335] do_syscall_64+0x39/0x80 [ 2619.568695][ T3335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2619.574598][ T3335] RIP: 0033:0x4191ec [ 2619.578505][ T3335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2619.598236][ T3335] RSP: 002b:00007fef289f0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2619.606745][ T3335] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 2619.615148][ T3335] RDX: 000000000000000f RSI: 00007fef289f01e0 RDI: 0000000000000004 [ 2619.623141][ T3335] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.631114][ T3335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2619.639125][ T3335] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 [ 2619.652414][ T3338] CPU: 1 PID: 3338 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2619.662666][ T3338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2619.672716][ T3338] Call Trace: [ 2619.675988][ T3338] dump_stack+0x137/0x19d [ 2619.680385][ T3338] should_fail+0x23c/0x250 [ 2619.684826][ T3338] ? __alloc_file+0x2e/0x1a0 [ 2619.689431][ T3338] __should_failslab+0x81/0x90 [ 2619.694254][ T3338] should_failslab+0x5/0x20 [ 2619.698762][ T3338] kmem_cache_alloc+0x46/0x320 [ 2619.703518][ T3338] ? __d_alloc+0x36/0x370 [ 2619.707851][ T3338] __alloc_file+0x2e/0x1a0 [ 2619.712266][ T3338] alloc_empty_file+0xcd/0x1c0 [ 2619.717071][ T3338] alloc_file+0x3a/0x280 [ 2619.721313][ T3338] alloc_file_pseudo+0xe2/0x130 [ 2619.726231][ T3338] __anon_inode_getfd+0x1d4/0x2c0 07:24:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) [ 2619.731337][ T3338] ? idr_alloc_cyclic+0x249/0x2d0 [ 2619.736387][ T3338] ? __rcu_read_unlock+0x5c/0x250 [ 2619.741408][ T3338] anon_inode_getfd+0x2e/0x40 [ 2619.746140][ T3338] __do_sys_bpf+0x8c9b/0x9990 [ 2619.750820][ T3338] ? kstrtoull+0x30e/0x350 [ 2619.755234][ T3338] ? kstrtouint_from_user+0x104/0x130 [ 2619.760723][ T3338] ? __rcu_read_unlock+0x5c/0x250 [ 2619.765766][ T3338] ? fsnotify_perm+0x59/0x2e0 [ 2619.770424][ T3338] ? __fsnotify_parent+0x32f/0x430 [ 2619.775520][ T3338] ? vfs_write+0x572/0x7e0 [ 2619.779940][ T3338] ? __fget_light+0x219/0x260 [ 2619.784687][ T3338] ? fput+0x2d/0x130 [ 2619.788623][ T3338] ? ksys_write+0x157/0x180 [ 2619.793105][ T3338] __x64_sys_bpf+0x3d/0x50 [ 2619.797607][ T3338] do_syscall_64+0x39/0x80 [ 2619.802002][ T3338] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2619.807875][ T3338] RIP: 0033:0x465f69 [ 2619.811746][ T3338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.831422][ T3338] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2619.839855][ T3338] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2619.847827][ T3338] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2619.855793][ T3338] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.863775][ T3338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2619.871742][ T3338] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 07:24:47 executing program 5 (fault-call:0 fault-nth:7): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, 0x0) 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, 0x0) 07:24:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, 0x0) 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2}, 0x40) [ 2619.986334][ T3362] FAULT_INJECTION: forcing a failure. [ 2619.986334][ T3362] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.011248][ T3362] CPU: 0 PID: 3362 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2620.021342][ T3362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.031402][ T3362] Call Trace: [ 2620.034682][ T3362] dump_stack+0x137/0x19d [ 2620.039086][ T3362] should_fail+0x23c/0x250 [ 2620.043509][ T3362] ? __alloc_file+0x2e/0x1a0 [ 2620.048115][ T3362] __should_failslab+0x81/0x90 [ 2620.052881][ T3362] should_failslab+0x5/0x20 [ 2620.057414][ T3362] kmem_cache_alloc+0x46/0x320 [ 2620.062200][ T3362] ? __d_alloc+0x36/0x370 [ 2620.066579][ T3362] __alloc_file+0x2e/0x1a0 [ 2620.071022][ T3362] alloc_empty_file+0xcd/0x1c0 [ 2620.075899][ T3362] alloc_file+0x3a/0x280 [ 2620.080162][ T3362] alloc_file_pseudo+0xe2/0x130 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 07:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 07:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, 0x0) [ 2620.085016][ T3362] __anon_inode_getfd+0x1d4/0x2c0 [ 2620.090047][ T3362] ? idr_alloc_cyclic+0x249/0x2d0 [ 2620.095081][ T3362] ? __rcu_read_unlock+0x5c/0x250 [ 2620.100120][ T3362] anon_inode_getfd+0x2e/0x40 [ 2620.104810][ T3362] __do_sys_bpf+0x8c9b/0x9990 [ 2620.109493][ T3362] ? kstrtoull+0x30e/0x350 [ 2620.113913][ T3362] ? kstrtouint_from_user+0x104/0x130 [ 2620.119321][ T3362] ? __rcu_read_unlock+0x5c/0x250 [ 2620.124350][ T3362] ? fsnotify_perm+0x59/0x2e0 [ 2620.129033][ T3362] ? __fsnotify_parent+0x32f/0x430 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, 0x0) [ 2620.134150][ T3362] ? vfs_write+0x572/0x7e0 [ 2620.138588][ T3362] ? __fget_light+0x219/0x260 [ 2620.143293][ T3362] ? fput+0x2d/0x130 [ 2620.147197][ T3362] ? ksys_write+0x157/0x180 [ 2620.151731][ T3362] __x64_sys_bpf+0x3d/0x50 [ 2620.156225][ T3362] do_syscall_64+0x39/0x80 [ 2620.160690][ T3362] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2620.166591][ T3362] RIP: 0033:0x465f69 [ 2620.170480][ T3362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.190159][ T3362] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2620.198569][ T3362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2620.206562][ T3362] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2620.214545][ T3362] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.222516][ T3362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:24:47 executing program 5 (fault-call:0 fault-nth:8): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, 0x0) 07:24:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x3}, 0x40) 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, 0x0) [ 2620.230491][ T3362] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 07:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, 0x0) 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) [ 2620.339822][ T3385] FAULT_INJECTION: forcing a failure. [ 2620.339822][ T3385] name failslab, interval 1, probability 0, space 0, times 0 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x4}, 0x40) [ 2620.380280][ T3385] CPU: 0 PID: 3385 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2620.390380][ T3385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.400438][ T3385] Call Trace: [ 2620.403718][ T3385] dump_stack+0x137/0x19d [ 2620.408134][ T3385] should_fail+0x23c/0x250 [ 2620.412560][ T3385] ? security_file_alloc+0x30/0x190 [ 2620.417852][ T3385] __should_failslab+0x81/0x90 [ 2620.422641][ T3385] should_failslab+0x5/0x20 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x5}, 0x40) 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, 0x0) [ 2620.427148][ T3385] kmem_cache_alloc+0x46/0x320 [ 2620.431912][ T3385] ? __alloc_file+0x2e/0x1a0 [ 2620.436504][ T3385] security_file_alloc+0x30/0x190 [ 2620.441541][ T3385] __alloc_file+0x83/0x1a0 [ 2620.445959][ T3385] alloc_empty_file+0xcd/0x1c0 [ 2620.450788][ T3385] alloc_file+0x3a/0x280 [ 2620.455060][ T3385] alloc_file_pseudo+0xe2/0x130 [ 2620.459938][ T3385] __anon_inode_getfd+0x1d4/0x2c0 [ 2620.464974][ T3385] ? idr_alloc_cyclic+0x249/0x2d0 [ 2620.470000][ T3385] ? __rcu_read_unlock+0x5c/0x250 [ 2620.475032][ T3385] anon_inode_getfd+0x2e/0x40 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) [ 2620.479712][ T3385] __do_sys_bpf+0x8c9b/0x9990 [ 2620.484530][ T3385] ? kstrtoull+0x30e/0x350 [ 2620.488993][ T3385] ? kstrtouint_from_user+0x104/0x130 [ 2620.494368][ T3385] ? __rcu_read_unlock+0x5c/0x250 [ 2620.499395][ T3385] ? fsnotify_perm+0x59/0x2e0 [ 2620.504081][ T3385] ? __fsnotify_parent+0x32f/0x430 [ 2620.509213][ T3385] ? vfs_write+0x572/0x7e0 [ 2620.513641][ T3385] ? __fget_light+0x219/0x260 [ 2620.518327][ T3385] ? fput+0x2d/0x130 [ 2620.522235][ T3385] ? ksys_write+0x157/0x180 [ 2620.526801][ T3385] __x64_sys_bpf+0x3d/0x50 [ 2620.531226][ T3385] do_syscall_64+0x39/0x80 [ 2620.535652][ T3385] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2620.541584][ T3385] RIP: 0033:0x465f69 [ 2620.545506][ T3385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.565386][ T3385] RSP: 002b:00007fdbc8853188 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 07:24:47 executing program 5 (fault-call:0 fault-nth:9): bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8914, 0x0) 07:24:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:24:47 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x6}, 0x40) [ 2620.574370][ T3385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2620.582354][ T3385] RDX: 0000000000000040 RSI: 00000000200012c0 RDI: 0000000000000000 [ 2620.590329][ T3385] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 [ 2620.598353][ T3385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2620.606332][ T3385] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 07:24:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 07:24:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c04, 0x0) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8914, 0x0) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) [ 2620.714204][ T3411] FAULT_INJECTION: forcing a failure. [ 2620.714204][ T3411] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x7}, 0x40) [ 2620.755958][ T3411] CPU: 0 PID: 3411 Comm: syz-executor.5 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2620.766056][ T3411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2620.776138][ T3411] Call Trace: [ 2620.779418][ T3411] dump_stack+0x137/0x19d [ 2620.783828][ T3411] should_fail+0x23c/0x250 [ 2620.788379][ T3411] should_fail_usercopy+0x16/0x20 [ 2620.793411][ T3411] _copy_to_user+0x1c/0x90 [ 2620.797839][ T3411] simple_read_from_buffer+0xab/0x120 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4cce, 0x0) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, 0x0) [ 2620.803278][ T3411] proc_fail_nth_read+0xf6/0x140 [ 2620.808294][ T3411] ? rw_verify_area+0x136/0x250 [ 2620.813149][ T3411] ? proc_fault_inject_write+0x200/0x200 [ 2620.818792][ T3411] vfs_read+0x154/0x5d0 [ 2620.822970][ T3411] ? __fget_light+0x219/0x260 [ 2620.827660][ T3411] ksys_read+0xce/0x180 [ 2620.831815][ T3411] __x64_sys_read+0x3e/0x50 [ 2620.836324][ T3411] do_syscall_64+0x39/0x80 [ 2620.840736][ T3411] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2620.846633][ T3411] RIP: 0033:0x4191ec [ 2620.850521][ T3411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2620.870198][ T3411] RSP: 002b:00007fdbc8853170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2620.878657][ T3411] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000004191ec [ 2620.886704][ T3411] RDX: 000000000000000f RSI: 00007fdbc88531e0 RDI: 0000000000000003 [ 2620.894740][ T3411] RBP: 00007fdbc88531d0 R08: 0000000000000000 R09: 0000000000000000 07:24:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x89ce, 0x0) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) [ 2620.902696][ T3411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2620.910651][ T3411] R13: 00007ffec705412f R14: 00007fdbc8853300 R15: 0000000000022000 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, 0x0) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x40) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448c9, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x2, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x89fb, 0x0) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x9}, 0x40) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448dd, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x3, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448c9, 0x0) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, 0x0) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xa}, 0x40) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, 0x0) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448dd, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x4, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xb}, 0x40) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8914, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x5, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, 0x0) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xc}, 0x40) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, 0x0) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x6, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xd}, 0x40) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x89fb, 0x0) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, 0x0) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40186366, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, 0x0) 07:24:48 executing program 5: bpf$MAP_CREATE(0x7, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xe}, 0x40) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40186366, 0x0) 07:24:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, 0x0) 07:24:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448c9, 0x0) 07:24:48 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:24:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xf}, 0x40) 07:24:48 executing program 5: bpf$MAP_CREATE(0x8, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, 0x0) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448dd, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x10}, 0x40) 07:24:49 executing program 5: bpf$MAP_CREATE(0x9, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8914, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:49 executing program 5: bpf$MAP_CREATE(0xa, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x11}, 0x40) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x12}, 0x40) 07:24:49 executing program 5: bpf$MAP_CREATE(0xb, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x401070ca, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x13}, 0x40) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448c9, 0x0) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40186366, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x14}, 0x40) 07:24:49 executing program 5: bpf$MAP_CREATE(0xc, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, 0x0) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448dd, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x15}, 0x40) 07:24:49 executing program 5: bpf$MAP_CREATE(0xd, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000000004, 0x200801) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x264400) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r4, 0xe}}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r6}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) fstat(r1, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x16}, 0x40) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086303, 0x0) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, 0x0) 07:24:49 executing program 5: bpf$MAP_CREATE(0xe, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) io_uring_setup(0x3953, &(0x7f0000000040)={0x0, 0xa24a, 0x20, 0x1, 0x287}) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0xffff, 0x1, @dev={0xfe, 0x80, [], 0x3a}, @mcast1, 0x1, 0x40, 0x8, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', r2, 0x2f, 0x6, 0x0, 0x4, 0xcc, @private1, @ipv4={[], [], @multicast2}, 0x80, 0x8, 0x6f, 0x1}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x5, 0x0) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000000c0)={0x1, 0xffffffffffff572d}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r4}) write$ppp(r3, &(0x7f0000000080)="e77c3439", 0x4) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x17}, 0x40) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086304, 0x0) 07:24:49 executing program 5: bpf$MAP_CREATE(0xf, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, 0x0) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x18}, 0x40) 07:24:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40186366, 0x0) 07:24:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, 0x14, 0x300, 0x70bd28, 0x25dfdbfd, {0x27, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "97c0171de7606544ed1b32562a42990afaa30cef4c8348f2f49d3a95278c28d6"}, @INET_DIAG_REQ_BYTECODE={0x23, 0x1, "0e79bcfe060b4bb7b738ad896c24c357a6a8b81421e4a02a49bde84297ee68"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "4807fc1de201a6f6e8783c4d58aa5f7c95debf509f4d08f0ead1759f3d9a291e3a39da002e4095716638466df0d41efe36f3327f7b21d48c672339fae49c6f915f09289ffbfd9b293c5ff106b29db9e17a4d35fa7adbea78fe625a2179d932baa720456d86a01db1288f9e04ddf9f0db69"}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "264e07bf2ee69c34abe5d523e1fbfe95b452b41740006d10711a90ba440ab85c81a363ed9666085c18921058ff50180a600488dca9e04fd330a8fabcd8522a51d6ade69f9526e9f52e9f9f4146bd0a1d38571cd981fb891b"}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000014}, 0x4048000) 07:24:49 executing program 5: bpf$MAP_CREATE(0x10, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086305, 0x0) 07:24:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00', r2) 07:24:49 executing program 5: bpf$MAP_CREATE(0x11, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x19}, 0x40) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, 0x0) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x800863ce, 0x0) 07:24:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000340)}}, 0x18) r3 = socket$isdn(0x22, 0x3, 0x24) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f00000000c0)={0x400, 0x5, 0x8, 0x2609}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r5 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r5, 0xdc, 0x6b}, 0x0, &(0x7f00000001c0)="23f28e9024236b6312d6f78d2d4a34e9e5e88c7e5fcb3108e2946f991497f4196f829b61d7d8cbf81e2c70a7d8f9f9e78b57e81696fb2605eef4d709bca29ef4fe301fa09689ef8d2e065a273b5b6fd4ca56aae3cfa922bbd08202e4b1b6132bd85188a14ea73cbb321b6c3704a16fbf661fcb223d03d21a574284eda45a379a532b96d2f6d1844b354fd5ced83490078b5f2105789bbfb1a4dcf8c8e0556e6d0394dd9f293cfca4d285e0e49e83c7f7bb53842fb829fc7044a46f9e5897ada7afdb73b4a54fff2054b6454a14cc7a628fea4aa083c937cd9807950d", &(0x7f00000002c0)="0e5daa7f1adccb4b7118d09518cf3a06209edee03b1308d0bbecd01e0be3c1d46410eb5117a0ad987e5e89cf46a3146b7eacd2d11039956b726030b9f9332332ac25334036dedc6010c73233bda10481c68e0ec0368bf61304d31e5bb03c4960322ef848bd35953119376d") ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r4}) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1a}, 0x40) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000100)=0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)) 07:24:50 executing program 5: bpf$MAP_CREATE(0x12, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1b}, 0x40) 07:24:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040)=0x4040, 0x4) 07:24:50 executing program 5: bpf$MAP_CREATE(0x13, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000080)=0x1) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1c}, 0x40) 07:24:50 executing program 5: bpf$MAP_CREATE(0x14, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1d}, 0x40) 07:24:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7ffffffffe, 0x20000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x3, &(0x7f00000000c0)=@raw=[@alu={0x4, 0x1, 0x8, 0x6, 0x6, 0xfffffffffffffffe}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0x6, 0xf2, &(0x7f0000000140)=""/242, 0x41100, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xd, 0x20, 0xfff}, 0x10, 0xffffffffffffffff}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x1}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, 0x0) 07:24:50 executing program 4: ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000280)=0x2) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x618000, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000003280)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003200)=[{&(0x7f00000030c0)=""/16, 0x10}, {&(0x7f0000003100)=""/223, 0xdf}], 0x2, &(0x7f0000003240)=""/11, 0xb}, 0x10000) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1a, 0x4, &(0x7f0000000100)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff8000}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x8000, 0xc5, &(0x7f0000000180)=""/197, 0x41100, 0x10, [], r2, 0x27, 0xffffffffffffffff, 0x8, &(0x7f00000032c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000003300)={0x3, 0xc, 0x9ff, 0x1}, 0x10, 0xffffffffffffffff, r3}, 0x78) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000080)) 07:24:50 executing program 5: bpf$MAP_CREATE(0x15, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6, 0x40840) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r3 = getpid() syz_open_procfs(r3, 0x0) syz_open_procfs(r3, &(0x7f0000000180)='net/xfrm_stat\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r4}, 0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3c, 0x1, 0x3, 0x5, 0x5f3, r2, 0x7, [], 0x0, r4, 0x0, 0x0, 0x1}, 0x40) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1e}, 0x40) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, 0x0) 07:24:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:50 executing program 5: bpf$MAP_CREATE(0x16, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x240) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={0x0, 0x77, 0x1d}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'crc32-pclmul\x00'}}, &(0x7f00000001c0)="16e5a2032631f796dad9e5233460dac2c0607145dad2aedd3c99991e1b00a878cbe0652f7450c7f04c43ae01ec3a2f624f4715f8ddd5d821dd2530d2727c85d999c798e09b4983a578f284de6bf9a2bf4877ab3aa0d74af621c9be133ecbd4f3aafdad764bc464690884af09869401e60e3693c04f6f4f", &(0x7f0000000240)=""/29) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) read$alg(r1, &(0x7f0000000280)=""/121, 0x79) 07:24:50 executing program 5: bpf$MAP_CREATE(0x17, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x21}, 0x40) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000180)={r5}) ioctl$PPPIOCATTACH(r3, 0x4004743d, &(0x7f00000000c0)=0x1) 07:24:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xe4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xc8, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) fstat(r1, &(0x7f0000000080)) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)) r2 = getpid() syz_open_procfs(r2, 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='net/xfrm_stat\x00') keyctl$get_security(0x11, 0x0, &(0x7f0000000040)=""/201, 0xc9) 07:24:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r1, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:50 executing program 5: bpf$MAP_CREATE(0x18, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x22}, 0x40) 07:24:50 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x74) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x343, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 07:24:50 executing program 1: ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:50 executing program 5: bpf$MAP_CREATE(0x19, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x23}, 0x40) 07:24:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x11, 0xff, 0xffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x55f}, 0x40) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1f, 0x200080) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000100)={0x3, 0x3, 0x3, 0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:51 executing program 0: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="672ec9a0434292e6e0865003f976e9a505b1a4593ec7e8208c48e6cdf7e4cbc595e161de886491992cfe1d7d6a2f80d7394db62ba602e7be2c62f615448008a895d1072a86df6bb2df7c046d5ac9ae2aed6ffc3119a4ca3338b6f91efdc1e1e97dcf8d2d352bf1ae07a47883654a52637371a5daa6b3", 0x76}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xb0, 0x1}, 0x40) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000140)={0x80fb, 0x2}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0xff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000080)="295aecd75c79fb6a759235b89cea1e1e66af6ec2d490036a301a67701778d99d2966bb97d33d7c29a3", 0x29}, 0x1, 0x0, 0x0, 0x4008010}, 0x880) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x1, {0xa, 0x4e21, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}}, 0x38) gettid() r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$reject(0x13, r1, 0x20, 0x3, 0xfffffffffffffffc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:51 executing program 5: bpf$MAP_CREATE(0x1a, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6a7, 0x400) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c03, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cachefiles\x00', 0x22400, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000580)=0x10000) 07:24:51 executing program 5: bpf$MAP_CREATE(0x1b, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x65178575, 0x490382) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x0, 0x2}}, 0x20) 07:24:51 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xdb0c, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x180}, 0x40) 07:24:51 executing program 5: bpf$MAP_CREATE(0x1c, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r2}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r5}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1f, 0x10801) 07:24:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') r2 = getpgrp(0x0) tgkill(r2, 0xffffffffffffffff, 0x1) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) 07:24:51 executing program 4: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:24:51 executing program 5: bpf$MAP_CREATE(0x1d, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x300}, 0x40) 07:24:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400000000001, 0x180) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) 07:24:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) 07:24:51 executing program 5: bpf$MAP_CREATE(0x1e, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) 07:24:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x10001, 0x40140) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x8200, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdadf250100000008001100000000000600030000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x2020000) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x500}, 0x40) 07:24:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x861c0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:51 executing program 5: bpf$MAP_CREATE(0x21, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x600}, 0x40) 07:24:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r1}, 0x8) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000240), &(0x7f00000002c0)=0x80) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f00000000c0)=0x100) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x4f, 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) 07:24:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x84240) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) socket(0x2, 0x1, 0x6) 07:24:51 executing program 5: bpf$MAP_CREATE(0x22, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r2}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 07:24:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000080)={0xc025, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f00000000c0)={r1}) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x700}, 0x40) 07:24:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10000000000014, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 07:24:51 executing program 5: bpf$MAP_CREATE(0x23, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f00000000c0)='attr/sockcreate\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x8913, 0x0) 07:24:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='net/udp\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 07:24:51 executing program 1: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x110920, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socket(0x18, 0x5, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x900}, 0x40) 07:24:51 executing program 5: bpf$MAP_CREATE(0x4e, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xa00}, 0x40) 07:24:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2000000, 0x400000) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) 07:24:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x10000, 0x200040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)) 07:24:51 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x458001) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x9, 0x0, 0x4, 0x1fe0}) 07:24:51 executing program 5: bpf$MAP_CREATE(0x52, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xb00}, 0x40) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_names\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x7) 07:24:52 executing program 1: r0 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="e8597405b80bb67bd8d02ccccd8acc705f1d48381442a6115b14e132c644c2b5c0d95070383f5c9659acf597e7c4e64605292a9eeff16788f52b3708b47cb0a419267d5fa765be7161438a4ce72c37445c3a7cf0ce7ff9869bcad8b85967b4b2bc127106d54a1397314dcccf3b76fd67eec642008d8f1763a6efb9b1a1cac22a62683c8da0d8401984b76fef4d7eb2fac57e2669e314fc7983398f92b9be4b4e634babee40689b574c5edaabf1ce147d10165e654e92d872fd77964180c85a77dba14a2fcb37306b4beabd80b0aabed8fcae5804fd30d02b89febdf5e0b151f70e", 0xe1, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000240)=""/76, 0x4c) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000002c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0xffff99ef) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xa0000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', r1) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xc00}, 0x40) 07:24:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000040)={0x80fd}) 07:24:52 executing program 5: bpf$MAP_CREATE(0x53, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) 07:24:52 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x4100, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) 07:24:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x400103) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xd00}, 0x40) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0xa2981) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0xb224d119b3ccb9b4) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffffffff8000, 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:52 executing program 5: bpf$MAP_CREATE(0x54, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 1: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0x3, 0x6, 0xffffffff}, {0xa0cb, 0xc6, 0xb2, 0x1}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net\x00') ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0xfffffffffffffffd) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1}) 07:24:52 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x81, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x8108, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r2, r2) request_key(&(0x7f0000000080)='logon\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='/dev/dri/card#\x00', r2) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0xa}, 0x10) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0xa000) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xe00}, 0x40) 07:24:52 executing program 5: bpf$MAP_CREATE(0x55, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) socket(0x18, 0x4, 0x0) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') accept$alg(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="040000000300000032e1b04cdf83fd0d2c947f963fd130401a87459b1f773d9d6856abd51ff0b616702d1521d2ed427114346673935ebee8c5ba47aee43b5bc0aaa87c78793e5b20dd0b316844ac32f7"], 0x50, 0x20000804, &(0x7f0000000100)={0x22, 0x3, 0x3, 0x0, 0x6}, 0x6) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000001c0)) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000140)=0x6, 0x4) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xf00}, 0x40) 07:24:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000000c0)=0x100000, 0x4) 07:24:52 executing program 5: bpf$MAP_CREATE(0x56, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:52 executing program 3: ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f00000000c0)={0x100}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x581) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4e37, 0x0, 0x3f, 0x3}]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:52 executing program 5: bpf$MAP_CREATE(0x57, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 07:24:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x341140, 0x0) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1100}, 0x40) 07:24:52 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0003e054a5f8490520301328bd7000fcdbdf250800000006001b004e2400000c000f0008000000000000000c000f"], 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x41) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x80086301, 0x0) 07:24:52 executing program 5: bpf$MAP_CREATE(0x58, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1200}, 0x40) 07:24:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) 07:24:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000001c0)={r1, 0x80000}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010100}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 07:24:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x460803) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x449a9c70653d2a4a, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_names\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1300}, 0x40) 07:24:52 executing program 0: ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f00000000c0)={0xe4e3, 0x2000000}) keyctl$get_security(0x11, 0x0, &(0x7f0000000040)=""/115, 0x73) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:52 executing program 5: bpf$MAP_CREATE(0x59, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r1, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x830) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:52 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:52 executing program 5: bpf$MAP_CREATE(0xec, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x165951ec5142c45f}) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1400}, 0x40) 07:24:52 executing program 5: bpf$MAP_CREATE(0x178, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000000)) 07:24:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000080)=0x7) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x732, 0x400080) 07:24:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1500}, 0x40) 07:24:53 executing program 5: bpf$MAP_CREATE(0x17f, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x20041) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000001c0)={r2}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1600}, 0x40) 07:24:53 executing program 4: add_key$fscrypt_v1(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x38, 0x35, 0x64, 0x61, 0x39, 0x30, 0x30, 0x61, 0x36, 0x37, 0x34, 0x63, 0x66, 0x35, 0x39]}, &(0x7f00000001c0)={0x0, "0d641b6dfcf567f2b6b0b35d978ae1cef99176a696aa0241acb26f8f5c2abcd21d1d4f6ce64a8d3998256f605019c43e571830c81a472b4e16fe0116621ef7f1", 0x2e}, 0x48, 0xfffffffffffffffb) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={0xffffffffffffffff, r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x488841) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 07:24:53 executing program 5: bpf$MAP_CREATE(0x180, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 3: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x6, 0x3, 0x41, &(0x7f0000000080)="71438098f8ec3c41d13222ffe7b7059e7f7195f567ec660e9acc87712471846dec5bb7641139322933e2ac19b259ace06130f22d94746a67d8a8b4ca30033e9933"}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x480201) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040)) 07:24:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:24:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:53 executing program 5: bpf$MAP_CREATE(0x27f, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1700}, 0x40) 07:24:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)) 07:24:53 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0xff01, 0x3, {"0f9715046ae0931fb5573aa13785777a"}, 0x7f, 0x4, 0x80000000}}}, 0xa0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xf9af, 0x5, "0843e31ac206faab876cc3b22b0032f4c13fc2c035371771fce255e4af68b87d060e0844e0c46946d67a0e5e06acbee4b7149cfd01a1d7a5012a5226438ca45b46d3477c949006f13f2a5bf579726e956338dc7216999171d117e75c76dcf32f92395dc0d3101b3a5894d0a38520342bab88fd616230074af09127bfd5c473d5222602f69b97691627798033c9a6b49267f00b61cc0fccfa424a60e30a3e35c0c79a0a42f338cec52185d41cebf60ca578bbe566631ddab86b706e7a23fc6c7ee4f879d7ec85eeda69099f9078100cd2fee6783ecdbadbc97d6e5df3a4fc2105e5304af791a2778457d236d8e7d8c6557731826cf981224b0d8cfc2bd8ba4302", 0x5, 0x0, 0x2, 0x81, 0x1, 0x2, 0x8}}}, 0x120) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/rt6_stats\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xef, "dd9752", "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"}}, 0x110) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000100)={r3}) 07:24:53 executing program 5: bpf$MAP_CREATE(0x280, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x264000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1800}, 0x40) 07:24:53 executing program 5: bpf$MAP_CREATE(0x28c, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') ioctl$BLKRRPART(r1, 0x125f, 0x0) 07:24:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, 0x13, 0x100, 0x70bd25, 0x25dfdbfc, {0x1d, 0x40, 0x1, 0x7, {0x4e24, 0x4e22, [0x5, 0x0, 0x3f, 0x316894a4], [0x1, 0x24000, 0x100, 0x445], 0x0, [0xfffffff9, 0x5]}, 0x891, 0xfffff7ab}, [@INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "9944b29d1ed62b4af1a3a3fd7465d31c08474c490ffd968aa8919521e693fdc2452bec32c5a98b75e7774b230e422de495da73fa6fcb68394cb19bbb68c9006468730f9259ff8cb1a2fb05682e2f3d28a848633e0f087d6bdca796d98c8bc47b6ce94b327966889cf37ba12baf65174c0037463c5e146fc35b69a961e51e9917405443c2fb110dd3214fe223d6cd94de69f003c93a1d53cddba39c5bd4c9bd9cf4f96a41c46ced6721103362966967e9bc37beba28ccf26b1e21715e682607578bcb"}]}, 0x114}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) 07:24:53 executing program 0: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3fffffd, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x80) 07:24:53 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x602000, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x9000, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000100)=0x4) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c03, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x2) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080)) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x22a00, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000200)={r4}) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1900}, 0x40) 07:24:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x72, 0x7, 0x48, @remote, @rand_addr=' \x01\x00', 0x8, 0x80, 0x4, 0x3}}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x8}}, 0x18) bind$xdp(r2, &(0x7f0000000340)={0x2c, 0xf, r3, 0x5, r1}, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x6, 0x800, 0x1}) 07:24:53 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001800), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/timers\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x1020000, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) r4 = add_key$fscrypt_provisioning(&(0x7f0000000200)='fscrypt-provisioning\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000006161616161616161616161616161616161616161616161616161646161616161313159fd8b55fc731dd397006106572092313131313131313131313131313131"], 0x48, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) 07:24:53 executing program 5: bpf$MAP_CREATE(0x2d9, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 0: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x3, 0x3, {0x1, 0xf0}, {0x0, 0x0, 0x1}, 0xfe, 0xfe}], 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffff, 0x400000) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1a00}, 0x40) 07:24:53 executing program 4: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000040)={0xf642}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x40140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) 07:24:53 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x80, 0x40, 0x4, @local, @private1, 0x40, 0x7800, 0x0, 0x7fff}}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:53 executing program 5: bpf$MAP_CREATE(0x2ff, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x200, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1b00}, 0x40) 07:24:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x2) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7f, 0xb4901) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:24:53 executing program 1: ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:53 executing program 4: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) 07:24:53 executing program 5: bpf$MAP_CREATE(0x300, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00', 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x71bd3b3e76c6d898}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r0, 0x4, 0x2070bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='net/fib_triestat\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0xd}}, 0x10) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000080)={0x14, 0xfffffffffffffedc, 0xfa00, {r5, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast1}}}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1c00}, 0x40) 07:24:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0xffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @multicast1}, @ib={0x1b, 0x7, 0x71, {"1bfc59c97afe992f0a6f93d719f395bc"}, 0x3, 0x6, 0x8}}}, 0x118) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stack\x00') ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) 07:24:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x6d4501) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x400) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:53 executing program 5: bpf$MAP_CREATE(0x358, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x80086301, 0x0) 07:24:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, [], 0x1}, 0x8}}}, 0x30) 07:24:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1d00}, 0x40) 07:24:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 07:24:53 executing program 5: bpf$MAP_CREATE(0x370, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000080)) 07:24:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xc, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x280040, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1e00}, 0x40) 07:24:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x200100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x8913, 0x0) 07:24:54 executing program 5: bpf$MAP_CREATE(0x37f, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:54 executing program 5: bpf$MAP_CREATE(0x380, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1f00}, 0x40) 07:24:54 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x34) keyctl$revoke(0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2, 0x80000}) 07:24:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x111002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x14040) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0xfffffffffffffffb) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x5, 0xffff, 0x0, @loopback, @mcast1, 0x700, 0x1, 0x2, 0x81}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', r5, 0x2f, 0x1, 0x4, 0x800, 0x7c, @dev={0xfe, 0x80, [], 0x1d}, @private1={0xfc, 0x1, [], 0x1}, 0x8, 0x7f07, 0xfffffff8, 0xf40}}) 07:24:54 executing program 5: bpf$MAP_CREATE(0x3c9, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2000}, 0x40) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x141400) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x0, {0x3ff, 0x81, "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", 0x8, 0x7f, 0x3, 0x8, 0x71, 0x9, 0x4, 0x1}}}, 0x128) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xa880) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000040)={0x5, 0x423d}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x2200, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2100}, 0x40) 07:24:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) userfaultfd(0x80000) 07:24:54 executing program 5: bpf$MAP_CREATE(0x3e6, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb342, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1ff}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x8, 0x3, 0xa, 0xffffffffffffffb0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x20, 0x2, 0x7, 0xbe62, 0x1f}, @alu={0x7, 0x1, 0xb, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x7, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2200}, 0x40) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2}) 07:24:54 executing program 5: bpf$MAP_CREATE(0x500, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 0: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x2000) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000240)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000002c0)=0x10000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) keyctl$describe(0x6, 0x0, &(0x7f0000000140)=""/134, 0x86) 07:24:54 executing program 5: bpf$MAP_CREATE(0x600, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2300}, 0x40) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x346, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) prctl$PR_GET_FP_MODE(0x2e) 07:24:54 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='children\x00') ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000001c0)={0xfffffffffffffffe, 0xb4a0, 0x80000001}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000200)) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000240)={0x401, 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x2}, 0x1}, 0x18) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xc0f, 0x40) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000280)) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$BLKPBSZGET(r5, 0x127b, &(0x7f0000000340)) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x50d00, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)) 07:24:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x1, 0x0) 07:24:54 executing program 5: bpf$MAP_CREATE(0x700, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1000000}, 0x40) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)) 07:24:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) 07:24:54 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x2, 0x7, 0x0, 0x1}, 0x8) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:54 executing program 0: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x21c, 0x12, 0x800, 0x70bd2d, 0x25dfdbfd, {0x1f, 0x20, 0x20, 0x9, {0x4e21, 0x4e23, [0xfffffeff, 0x67e5, 0xffffffff, 0x4], [0x1, 0x0, 0xfffffffa, 0xfffffffd], 0x0, [0x7, 0x7]}, 0xfffffffd, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "71faa85ff090a74439a3913ef1b7ca89d1acc744baac93db5a6ed53e5f5cab55c8fcffe500920b8872ea4e1903bd5e1a05dec52267d8157865f7e97434f69a1807baadce8d99cd14f957c1f0ad656f84edada3b9e77e59af02f4aef3ed341ac532a1bea047190d36fcd80e02256b37927bd997307a175e73831bc254e78f8c98a6ae14620dec1dfe1e45ec8d0a07d5a79a693f8c5cccfdd95b72d9af2c814f6ad545a6cd6046fb3d91228affbe654422117553f8e3f7e6b8b6b285f2ed221104614e2f8fa699b7e46460a629217e8089cc023910e5aa3cbd7a"}, @INET_DIAG_REQ_BYTECODE={0xef, 0x1, "858265cace1739ec406f7f5bf0bacbbe44a40d0b8b0e82220350abe569286348b8a5e62a02518de48d4f0cc7f4a9773555b5fde39468b25d5f408c27800bbaeef75cf6878a38c2e4869f3d804517e2f4d0e9835aa7bbc45ad4459e5e103b0430b50bbca3aab7185fb23ade0b119e4df9d38692e08b964d3fcc98fc16bac78b8c09537e21b2767520266ae9856b8e839b4bcc1cf0c4b38b9014468964cc676b4503fa1d3b263a5a2bc5ef1aba29caf3a531ed89f5931ca58180b5be71aa8a2050e04a9cb4c7d4d2bd89d39f34ae2b1ef1301e665eab41dda30337a756e6d7e52188253d8ff5bddb68676ccb"}]}, 0x21c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:54 executing program 5: bpf$MAP_CREATE(0x880, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 4: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c05, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0xff81, 0x7f, {"94384f496c6062de2de03fd9e40ee52c"}, 0x1, 0x1, 0x6}}}, 0x90) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r1}}, 0xc) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x2000000}, 0x40) 07:24:54 executing program 1: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x0, {0x7f, 0x8, "a58b958192254acc08a83a7b6af42fb0e4bfc378dcfc5a2c50345efa2f3c6563c2acf36fab80572ef1eccac2e6d2774e0c9a0b7166b0acb1d24618afeb4450637093fea57ad330e5a67d3a449d39a81e881984912e0e32039c5391570f5c85e333535cf610d1b879a8e34218ec98485f368bc7985d702edc40d0108a0599a9494369cce153e2587ae311a7ff3b2ed6959fa581b60a50a311527a66402d3d59e95e440cea5f64f932807a70b2abef0557f31c17ed9ca056c33f6a9013dd657f1cdc92f79f075788395b6e73d7688485e31afdd19218ccb58d3d17b6090f25984ecebe2625b1daba46ae7216196d2a4ab81c8d8a092dc89c764c60b1130a051482", 0x1c, 0x41, 0x40, 0x7, 0x7, 0x69, 0xf7, 0x1}, r3}}, 0x128) 07:24:54 executing program 5: bpf$MAP_CREATE(0x900, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x3000000}, 0x40) 07:24:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:24:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:54 executing program 1: r0 = socket(0x25, 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={0x0, 0x1118}}, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x128, 0x8}}, 0x20) socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c03, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0x980, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) 07:24:55 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x4000000}, 0x40) 07:24:55 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0xa00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10007) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x5000000}, 0x40) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0xa80, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x654d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) 07:24:55 executing program 1: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000001c0)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3c, 0x109000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c05, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffc00, 0x400400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000140)={r6}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x80, 0x7, 0x6, 0x292c, {{0x16, 0x4, 0x2, 0x14, 0x58, 0x68, 0x0, 0x4, 0x4, 0x0, @loopback, @multicast2, {[@timestamp={0x44, 0x24, 0xa4, 0x0, 0xf, [0x70000000, 0x8001, 0x7, 0x100, 0x3ff, 0x81, 0x6, 0x81]}, @noop, @cipso={0x86, 0x15, 0x0, [{0x2, 0x5, "a91252"}, {0x0, 0xa, "56784cf9455f3ed6"}]}, @ssrr={0x89, 0x7, 0xf3, [@rand_addr=0x64010102]}]}}}}}) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x6000000}, 0x40) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x208, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {0x18, 0x84}, [@INET_DIAG_REQ_BYTECODE={0x77, 0x1, "033ca658c9ff63e267422e2cad57f0a7085282c7e4f6aea9a0ed4093a187e34e84e868653ea736617a593a08c0f5627b5164afcbbdfc73959702a47027f132311f5e5c05ece7f09112f172521be0d7dc00e74f8cfaf6442cc77624f7e320c8072fde5eab3df08fcd75c4b0c57361b3154b22a5"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "065301af68f477dadbc7e425b62221bf3aa5e1634716fe46597582e0aa5a46966015d5e640e8550df11ed45e2b56960d1405ccddf2893d0231807af78e3a823a00c67af323d6f0192da08d3ecf4b494c1c373faf63b284244ff9be31e4baf659ec12168f8941bd31eb06e8ac0984e1ccd2dd05bdaa145f"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "f35a2b96b0c9a1f469feb5cbbe30a7d0697a05cc47783479cb1c51cd013ebda047e543c579816506397abb56f12ff528661782f1cd8fbd7809106a7f5a81e621893dc7305a560483e06fb23886d8ece19a4396d2d1f157485945a33bfcead4c1fb741222e09156e6d8048055417dddf9785e405bd25fabd69dc1de305e695aa6ee416338b93d1e822ad8fc9c3845cf52b98a92da0fdff20aa820b22164350c2bedbfacfa3558f55e4d42543a27c31f069f4dec887e7a53e2569a3466b8ae2904820d86142f3c6f12a268c546896cf7f5323f406b3cf96b68bbce2767c23a45656e3b40f43747e014f54741dea379ae01767efb6b080d856895"}]}, 0x208}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) 07:24:55 executing program 5: bpf$MAP_CREATE(0xb00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x7000000}, 0x40) 07:24:55 executing program 5: bpf$MAP_CREATE(0xb80, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000014c0)={0x6, 0x118, 0xfa00, {{0x101, 0x200, "db77dff24c1d9d83e09521e653619d0201a0d72d7dad19b131f41eda109db9cd56f6bd201039a75c61f848f18c2dcdfd6fa4986f8fd442a3f6cdf8efc51a86b5ba59464dcf1489e2e627271c9b045cd6f5f5dfc7d284d8c7b3ded6193c3f365bd702172d754c93fb5746d96422d3c4cf8e059e9c9cc9ebc85b03f0c1ab0c6ff8996c7049b2029cb9bf63a12895bf47c2efe1747695693c082e0f17945cceadcecc1e0f79e94d32731930298100afe69889a5a2eb02a8769fb8c560cac264fc1b556020c935d1d91c01e638a382dba59e01bc879f84d9237dccc4eb5f514163d87117012f7316f510ef42d1832ebb0fd0c839dbaf77f2779c8af1b25daf2fb556", 0x3, 0x2, 0x40, 0x3, 0xbd, 0x7a, 0x1f}}}, 0x120) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000001400)='/dev/dri/card#\x00', 0x1, 0x100) sendmsg$xdp(r1, &(0x7f00000013c0)={&(0x7f0000000000)={0x2c, 0x5, 0x0, 0x19}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000080)="2f6edd6541eb00874b8ada24acc4b6a278e4fcf21d7b6aaea86bdcd5852f875c62d2d8ee687a7b6163047e5c25a756e2dba805f84d17cebb26ebe0a181698ee5e930edcfeae618ce4765af9898aa77d985df7c08931311", 0x57}, {&(0x7f0000000100)="f1be93f93b00538304fd590dbdbf77224a1d8bc7273d167750a6c0beaf6f256860538c089f65cd77528cf2981ca6a03c14d568cf999ec1724ede49d73b1e387b49267f7541a4ee842c80c30705bbfbe1cd485e9d56d6dae84d6d160e48db7eebc03bb9664f73f9e20721016e77a97fa65464d1de4b947532b5c1d6b2da9560f2526c5f81e898611593e4db96b32ea7151f9cf09989361e7eadb04f003e3afed0cfa621b3561b8c4efbacdaccb5e34e8ef8c021f807ac21c56131d72f33043621dbd216356fa38fa9d606afc434388dcaf3fb449d862d693ddb39522a8d807a0d25dd6e22a286cc44c6f8", 0xea}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="1d4a19de48c7c0d5fc91f02034c7ae6747bd3beb17d09ecbd3d8798c147d4ac7f9dd5ae586d5c6b3ca9c8bdefeb543bb475827fa90a1a6ca3f7d132ea535115fd93bc841f70bd0a23097795bd2f4d75916983c23ef7d63553738746ea88f4b3cd8570a7f253d94610561e474eefea0fc407f2116ea7b2e127dcf311a64b23a21b4e2a70ba563ee806ad7f5655d23f53227c9af53464b9b52cca07ea834c0bd68bee3d7ef1787bda1d9e09d7d319d9f1358d48e8c333c97b385232f94c0db8cbcb8013f33c3c41eb391350d7d4d3662f304f45abeaf535ad6ed91350a5fe3bb19fb14baec4d5dd7de2a5d457f95edd0b6b7dd", 0xf2}, {&(0x7f0000001300)="e77c0396f546a184519538ad4d1b69efdb69a9b4b5572299191d351a8ad0ad4204ad6e3d59a6890297b8feb508b027", 0x2f}], 0x5, 0x0, 0x0, 0x80}, 0x20040811) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001440), &(0x7f0000001480)=0x30) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r1) 07:24:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x401) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x8000000}, 0x40) 07:24:55 executing program 5: bpf$MAP_CREATE(0xc00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0xd00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x2d0001, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1c}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r1}, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x9000, 0x4) 07:24:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x80000000) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x9000000}, 0x40) 07:24:55 executing program 5: bpf$MAP_CREATE(0xe00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x1230c3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x242000, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0xc2) syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x4, 0x80000) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x7, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000140)=0x7fffffff) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x10000) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffb7d, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ocfs2_control\x00', 0x111e00, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000280)={0xc, 0x8, 0xfa00, {&(0x7f0000000100)}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000480)) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x400, 0x7, "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", 0x1f, 0x9, 0x88, 0x3, 0x0, 0x81, 0xbe, 0x4}, r3}}, 0x120) bind$isdn(r2, &(0x7f0000000040)={0x22, 0x5, 0x6, 0x3, 0x5}, 0x6) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0xc080) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xa000000}, 0x40) 07:24:55 executing program 5: bpf$MAP_CREATE(0xf00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x358, 0x56c82) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='coredump_filter\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r1, 0x3f, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp6\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)={r2}) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xb000000}, 0x40) 07:24:55 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x480003, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0x1100, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x1938fe3c81024227) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={r2}) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xc000000}, 0x40) 07:24:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x408480, 0x0) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:55 executing program 1: recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/168, 0xa8}], 0x3}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x1, 0x0, 0x12, @local, @private2, 0x10, 0x7, 0xfffff2c3, 0x8}}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) recvmsg(r1, &(0x7f00000006c0)={&(0x7f0000000400)=@x25={0x9, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/31, 0x1f}, {&(0x7f00000004c0)=""/108, 0x6c}, {&(0x7f0000000540)=""/3, 0x3}], 0x3, &(0x7f00000005c0)=""/254, 0xfe}, 0x0) connect$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x1}}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') socket$can_j1939(0x1d, 0x2, 0x7) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r3, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c03, 0x0) 07:24:55 executing program 5: bpf$MAP_CREATE(0x1200, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) 07:24:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xd000000}, 0x40) 07:24:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4800, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 07:24:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1300, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x185, 0x1000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) 07:24:56 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xe000000}, 0x40) 07:24:56 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x12000, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x60000000008, 0x51b101) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0xf000000}, 0x40) 07:24:56 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket(0x2b, 0xa, 0x2) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x781}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="28a9c10000000023000000a29e48e064134407b51d06bc475fe142c246a7edd0e53630027a605610edd26aa62ff5f6c0c8500e74fa56f34866c959c5b03be554", @ANYRES16=r1, @ANYBLOB="040025bd7000fddbdf25080000000c000f00060000000000000006000e0007000000"], 0x28}, 0x1, 0x0, 0x0, 0x411}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00', r2) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c03, 0x0) 07:24:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0xfffffffffffffff3) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000040)={0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1400, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x10000000}, 0x40) 07:24:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) 07:24:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200000000, 0x2100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x218, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 07:24:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='children\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0xffffffff}}, 0x18) fstat(r0, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x8913, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x30) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000140)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x2) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1500, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000, 0x105204) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000040)={0x2f, 0x3}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @local, 0xffffffff}}}, 0x30) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0xa, 0x0, 0x1a}, 0x10) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x11000000}, 0x40) 07:24:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400000) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000040)={0x4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1600, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 1: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)={0x6, 0x7, 0x0, [{0x5, 0x12, 0x4, 0x3f, 0x81, 0x2a, 0x20}, {0x20, 0x5, 0x1, 0x7f, 0x14, 0x0, 0x1}, {0x10001, 0xa00000000, 0x0, 0x1, 0x0, 0x62, 0x59}, {0x5, 0x2, 0x5, 0xff, 0x6, 0x81, 0x1}, {0xfffffffffffffffe, 0x9, 0x1, 0x1, 0x4, 0x6, 0xe0}, {0x2, 0x3, 0x1f, 0xfd, 0x1, 0xc0, 0x7f}, {0x4, 0x9, 0x3, 0x6, 0x9, 0x0, 0x5}]}) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x4241c3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x12000000}, 0x40) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1700, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 4: write$ppp(0xffffffffffffffff, &(0x7f0000000040)="a977ed64cf0c5c4cf993f58fcf9479ccb06b64f64996ac112da5fd221d6991388f99e98fea29205d65591eaf0ca4979e20de7b0c6c9cddcb61389aaa60ba6d3f166ad26b4ded7c06c56dbcc9d1f6029e6e6feefb5bf2a072768451083b34a965f53c93e380cf6406c1d3f63366f85c5e41a9b43380e4996f0bcba33cd46e9ef12058eb15a4f51e68f972a210a4df2f98f2d6768a0066ed5910ec384fc94af055c4b87846ca06e927300fbcedaf2712e1e1ec203cd45bfcde22452fe5d4c91637890c8ce47ac96bde8338661219b6e239d352a34010b41f540523300f290b7f", 0xdf) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000440)={0x802b, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x2}}, 0x18) 07:24:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x224000) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:56 executing program 1: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e22, 0xff, @empty, 0x80000000}}}, 0xa0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:56 executing program 3: ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200, 0xb4242180f0af8091) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000080)=0x1) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x13000000}, 0x40) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1800, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x64d00, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0xb}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c05, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x5, 0x406000) 07:24:56 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x100000001, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x40, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:24:56 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0xc43277064372a98d, 0x80000001, 0x2, {{0x29, 0x4, 0x3, 0x2, 0xa4, 0x65, 0x0, 0x36, 0x4, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x34, 0x30, 0x3, 0x7, [{@remote, 0xffff}, {@local, 0x10000}, {@private=0xa010101, 0xfffff801}, {@rand_addr=0x64010102, 0xfe}, {@private=0xa010102, 0x8}, {@private=0xa010101, 0x80}]}, @generic={0x94, 0x7, 'B\a4Lq'}, @timestamp_addr={0x44, 0x3c, 0xc, 0x1, 0x5, [{@broadcast, 0x675daed}, {@local, 0x8}, {@loopback, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast1, 0xa8}, {@rand_addr=0x64010101, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @end, @cipso={0x86, 0x17, 0x3, [{0x3, 0xb, "b9f5dec0ab7b3cccd0"}, {0x1, 0x6, "9b191f14"}]}]}}}}}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x1d, r0, 0x3, {0x2, 0xff, 0x1}, 0xff}, 0x18, &(0x7f00000002c0)={&(0x7f00000001c0)="918160e6174fd603bf508115d29bfbcecee5ccf51534525d58943999b88b51a77e190b029d1e57833c64f2ffcb87710bfe6892dda798684c8752c5324f7678eb4536927d7e3c00261627b8e3cbf0a560e019a2f4206bb9cdeca1d6423837189f22e12c3d5714cfb83ea0caa4253c18122428d2b69e8c884c03ac3c30fc819fdc491f90adb7fde9495fe518365620020120eb76a9d84ed128db171f72427229ceed0aee9173e467b0659e1741df9a8dc64846e133801fa2453359c8dbdd66c8c839f52705b2596850d1a96e8495e0da692ff18be7", 0xd4}, 0x1, 0x0, 0x0, 0x20048005}, 0x4004000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl0\x00', r0, 0x4, 0x20, 0x5, 0x8, 0x0, @private2={0xfc, 0x2, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40, 0x7, 0x950, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', r1, 0x4, 0x28, 0x39, 0x6, 0x50, @private0={0xfc, 0x0, [], 0x1}, @mcast1, 0x8000, 0x20, 0x0, 0x7654d11b}}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$IMCTRLREQ(r4, 0x80044945, &(0x7f0000000380)={0x200, 0x1, 0x4, 0x10001}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c03, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 07:24:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1900, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x14000000}, 0x40) 07:24:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) fstat(r3, &(0x7f0000000140)) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000001c0)={0x3ff, 0x7fffffff, 0x1}) 07:24:56 executing program 1: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c03, 0x0) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x15000000}, 0x40) 07:24:56 executing program 0: stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:56 executing program 3: ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x6, 0xf5, 0xc0, 0x1f}, {0x6, 0x49, 0x1, 0xe19}]}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/tcp\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e1b, @rand_addr=0x64010101}}}, 0xfffffffffffffe09) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000240)) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', r1) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1a00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1b00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x16000000}, 0x40) 07:24:56 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$qrtrtun(r0, &(0x7f0000000080)="8b692a069cd93c83528bd82d0dfdea0b9a8dbb71f24e744ae78197480465e3c40cfb4dc423f6d14351e4a5b9a0123e2cfd57740903cff4907de1cd26680de179cf2cca502158cb09bfdd04869c1f8cd67019a443207de4b488", 0x59) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:24:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x82000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:56 executing program 5: bpf$MAP_CREATE(0x1c00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x17000000}, 0x40) 07:24:57 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0x1, 0x5, 0x401, 0x42, @local, @loopback, 0x8, 0x10, 0x5, 0x7f}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x5, 0x8, 0x6, 0x48, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3e}}, @private2, 0x700, 0x8010, 0xffffe3b8, 0x6}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440800}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000120020002dbd7000050000000001000005000000f8020000000c000001ffffff06000000", @ANYRES32=r1, @ANYBLOB="080000005e33ffff0500000005000000690001004ff01b5ccfd3995177af640d6c28b1095b7ceea1905c6759bcb9ae9ed521c3a6b3859895b8561f13fa976e6699fcbea1b1c80d91fa874a1988a7cb30a9f6ad56f447879b7376ea14e913a8d3a011ba65e3f7ea0e92b3b3303e7fedf94b85d4ca80ad7e5d5c000000"], 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x8) r2 = socket(0x29, 0x5, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/73, 0x49}], 0x3}, 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280)='l2tp\x00', r2) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', r1, 0x2f, 0x3e, 0x7f, 0x3f, 0x0, @mcast1, @mcast1, 0x10, 0x7, 0xd6, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'sit0\x00', r4, 0x4, 0x1, 0x7f, 0xea03, 0x4, @private0={0xfc, 0x0, [], 0x1}, @local, 0x8c4c184202b0dd95, 0x7800, 0x2, 0x101}}) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001880)="9b", 0x1}], 0x1}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffff7ffffffffe, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x8913, 0x0) 07:24:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x86a4, 0x632842) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) 07:24:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0a1}, 0x1) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), 0x4) 07:24:57 executing program 5: bpf$MAP_CREATE(0x1d00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002840)={'syztnl0\x00', &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0001002000000007000000f1470e001ce94800640000062f90780a010101ac1e01014806da0b09ac0d908e9a793beba6c73bb77d121edf0ccb58d62a70edc03daf338a80c36fed30ffedf5f75279873b88f7eaad15807cd73f29cf9a32908f891b0e7609874d7432c5568d2d4970470102572baec402a7c5eef102c04b9736f2a82cb7e500000000"]}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x3, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0xce99, 0x0, 0x0, 0x41100, 0x12, [], r3, 0x8, r4, 0x8, &(0x7f0000002880)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000028c0)={0x1, 0xc, 0xfff, 0x2}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:57 executing program 5: bpf$MAP_CREATE(0x1e00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001340)='net/packet\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x4008, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000013c0)={'ip_vti0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='grUtap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00077800000000040000b8e845b000140067000004299078ac1414bbe0000002"]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') read$qrtrtun(r3, &(0x7f0000000080)=""/90, 0x5a) 07:24:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') 07:24:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x18000000}, 0x40) 07:24:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000002980)=[{0x0, 0x8000000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ocfs2_control\x00', 0x1, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000380)={r5}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000200)=""/144, 0x200000, 0x800, 0x10001, 0x3}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x7fff, @private2={0xfc, 0x2, [], 0x1}, 0x20004}}}, 0x30) 07:24:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) read$alg(r1, &(0x7f0000000040)=""/220, 0xdc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:57 executing program 5: bpf$MAP_CREATE(0x1f00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x110c00) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x319002, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$BLKREPORTZONE(r5, 0xc0101282, &(0x7f0000000100)=ANY=[@ANYRESOCT=r6]) 07:24:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) write$apparmor_exec(r1, &(0x7f0000000080)={'stack ', 'coredump_filter\x00'}, 0x16) 07:24:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x19000000}, 0x40) 07:24:57 executing program 5: bpf$MAP_CREATE(0x2000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) 07:24:57 executing program 4: r0 = getpid() r1 = getpid() syz_open_procfs(r1, 0x0) tgkill(r0, r1, 0x37) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/keycreate\x00') write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x2, {0x8, 0x81, "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", 0x2, 0xc2, 0x3f, 0x7, 0x3f, 0x20, 0xc1}}}, 0x128) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)) sendmsg$xdp(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="84058749c2eead202b9b3d613cfd315360c9276fc7f26619ae323f251d43d126", 0x20}], 0x1, 0x0, 0x0, 0x24008091}, 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c05, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000480)='/dev/cachefiles\x00', 0x80000, 0x0) syz_open_procfs(r0, &(0x7f0000000880)='coredump_filter\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000004c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000002c0)={r7}) 07:24:58 executing program 5: bpf$MAP_CREATE(0x2100, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 4: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x400, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xc}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r2}, 0x8) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c05, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1a000000}, 0x40) 07:24:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1b000000}, 0x40) 07:24:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x80040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 5: bpf$MAP_CREATE(0x2200, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x184, 0x14, 0x100, 0x70bd2c, 0x25dfdbff, {0x21, 0xe4}, [@INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "8c480d06d69b9bb51e8fbe25e07717dfe6209b4af0f266b71b4ea91f3016e1f9fba580bd061ec43941217c35951fcc1da1d282bab890abbce001acfd20ff5d1953cf16426a7f7a02ded81cff36e27a084a8f1278140b7d20cedb2f546247e398cdd7ac147ca4ff7a1041e8ef3b9d27dbb2856be86623f9b1ebd6fcf2fa0ccaffd7c2da88eb0f8401edf33c"}, @INET_DIAG_REQ_BYTECODE={0xe0, 0x1, "19333aa89b670ff045507b7803f89d35473efe727b71dffdf8463270d5a42371b6df596a4938fb5b5c1c06ae99b9e851b8e9cd2a10015cbf8a808077e7d58c9e28728d555d5cfc7aa8c4b015e08ba26b767b891e7b316d9c9a50ddb6d4e0ecc59aef3716fa79b65207e1ba668fc778097613fe719abe77ba715081e0abf0715ecb3039be1b59ab485e6f2cb6e5633925a1d90867e5988e44b5ff110443400b0c9a8498d5fafa9c860aec764ba6be4e3506dbb743cb0d47e3c57561eaffbc471f38db4ad5f82f53c9f033320439e9c320255559a11c54bd43c83345f4"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4064804}, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1c000000}, 0x40) 07:24:58 executing program 5: bpf$MAP_CREATE(0x2300, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffff, 0x272000) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2, 0x4800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0xf3c00, 0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r4}) 07:24:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x2240) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socket$inet_udplite(0x2, 0x2, 0x88) 07:24:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x40, 0x8, 0x6, 0x49, @private0, @remote, 0x1, 0x8, 0x0, 0x1}}) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x8913, 0x0) 07:24:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r1}) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1d000000}, 0x40) 07:24:58 executing program 5: bpf$MAP_CREATE(0x4000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 0: socket(0x2c, 0x3, 0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ocfs2_control\x00', 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000002c0)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x101}}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8186d81960d90800fdffff00001300"], 0x14}}, 0x40) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00', r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd2a, 0x7, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x80086301, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) 07:24:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1e000000}, 0x40) 07:24:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 07:24:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x1f000000}, 0x40) 07:24:58 executing program 5: bpf$MAP_CREATE(0x4e00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8100) fstat(r0, &(0x7f0000000200)) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x51101, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000000c0)) r3 = getpid() syz_open_procfs(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000880)='sched\x00') r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2081, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f00000001c0)) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000100)) 07:24:58 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x20000000}, 0x40) 07:24:58 executing program 0: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x80086301, 0x0) 07:24:58 executing program 5: bpf$MAP_CREATE(0x5200, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 1: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002580)={'erspan0\x00', &(0x7f0000002480)={'syztnl2\x00', 0x0, 0x0, 0x10, 0x1d13, 0x2, {{0x2f, 0x4, 0x0, 0x4, 0xbc, 0x66, 0x0, 0x5, 0x29, 0x0, @local, @private=0xa010102, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x5b, 0x3, 0x1, [{@dev={0xac, 0x14, 0x14, 0x39}}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x6}, {@empty, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x8fb}, {@empty, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0xac, 0x1, 0x5, [{@multicast2, 0xffffff01}, {@loopback, 0x64}, {@multicast1, 0xd2d}, {@multicast2, 0x1}]}, @timestamp_prespec={0x44, 0x14, 0x48, 0x3, 0x5, [{@empty, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d}]}, @timestamp_prespec={0x44, 0x34, 0xe7, 0x3, 0x5, [{@local, 0x800}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xc4f}, {@private=0xa010102, 0x2}, {@empty, 0x800}, {@local, 0x23e2}, {@empty, 0x5}]}]}}}}}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f00000025c0)={0x2c, 0x0, r0, 0x39}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002600)="48621d9d64fd658019db9ab95e939473ee916dc231a519da69057a51abee0174f839461da32a90635c17495e569ab69ba94f1326e58503243ee5fa12c627e69bb5b776866d1963e568f73825a33447d911ae5454964e71761acf7a761867755d810a280e9e1b95323d3c7ccd749f93ef3091b0ea29f50d3c587f675248bae30b98d1cafcdd19ec4f11b6c8713931f36a9bb9ca79553c682d568e748d9f1ddf55587fb2e1e93fa9dfe80be42c5b31cb", 0xaf}], 0x1, 0x0, 0x0, 0x4008000}, 0x4000004) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:24:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)=0x6) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000001080)={0xfffffffa, 0x4, 0x1000, &(0x7f0000000080)="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"}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000010c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000001100)={r1}) 07:24:58 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x21000000}, 0x40) 07:24:58 executing program 5: bpf$MAP_CREATE(0x5300, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='statm\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x40, 0x1000}) 07:24:58 executing program 1: r0 = socket(0x29, 0x4, 0x1000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2d0, 0x14, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1f, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "0450c5ea8c7abb0f1d958f02db2b8e49718af7d230b3767c011c79dcb0dde1ebe277d370dfe4afeb09a189b2d86782923a23f2958b76ac5d9c"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "bb8ba7ab4c90b20d63b70a912c75d36288645aef"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "81bc805cdb2c598fcda39942536996ee1757decb2b5573ca6e8b1c2fd06ffb6fcea79f273572a0b8214b135b435884b7f048fe6b274f23801f8095c99d986970073627277dbf93c57288f95ff05cf0417c6b1a00371586226f393e17baacc67e3da0936d6a359245164f2b67d803d7ba2c170df43c58f9dd2339e88e835ebf3bbac8ad4978eca9b7b232a059b8ced3fc6d4cb7490757fb7a4bd161c128668d7c25296976f0aa9efbabb80d64f80d7a0cca6967f80be81f64b4d3cb397317be90d4b409fee74a7b4f99be740f859a15db3f160c9b8dedc832629c0c2155b19ab6254726c753d3db"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "d3730145b1a41c16eccba4a700d4768b86bdac19272e907338e3a240f5a9"}, @INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "ee7eb201f407c29447f4453155de8e285d7582f5bbb9d0e2b8e973ca870ba4bee1ce84ac3897de9e1c5eda8229f33a6e66ce6b858a358c7857a639fde4727a1f5c8abd75ef35ad94ecfe11c665b9714ba57ab91bcd47c45eec07b2b74d9bf70fee8bbd627771eac47da17422bb0f6f8bf714ea0d29a70a94eb"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "f585420285e11aff4626bf407798242c7b202ea188b037e3852ffdbdf2f4145dcb5d055af2bb71586b613bd65b34e5b016554158c8f7b82ed260a7f52b5f41d07df7ecda143fe02bbf4bab4bfc540bec95d10fd97bc1e5cea84fa0"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "47ec2bf5e8c7cd7971a6a76bb4032c7b67bd95ba50f01c69918d4e329ba3523c1c025a1ebca96d9913265cb7c85d3bf8559f5c93edd77e960527d9f41d5e8018da35dc0487f6dcc27743601f27249d43ab56ea9967c43e8aebac10e8e6e0fecb9bdca1ce0def8f7c5b106ee58f"}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000004c0)={r3, 0x80000}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000540)='l2tp\x00', r2) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780)='l2tp\x00', r2) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r5, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4084) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000480)={r3}) 07:24:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x6a4942) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x22000000}, 0x40) 07:24:58 executing program 5: bpf$MAP_CREATE(0x5400, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x38}}, r1}}, 0x30) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x14000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x80086301, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x181700, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7, 0x102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x200, 0x0) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000100)) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x300000e, 0x30, r3, 0x80000000) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x20000, 0x0) ioctl$IMDELTIMER(r7, 0x80044941, &(0x7f0000000280)=0x2) 07:24:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000, 0x210140) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:58 executing program 3: setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040)=0x7, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:58 executing program 5: bpf$MAP_CREATE(0x5500, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 07:24:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x23000000}, 0x40) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='limits\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0x4) 07:24:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8303) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) 07:24:59 executing program 3: getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x8913, 0x0) 07:24:59 executing program 5: bpf$MAP_CREATE(0x5600, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x200000005, 0x6b8840) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x80010000}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x414147) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x3f, 0x1f, 0x8, 0x50, @mcast2, @dev={0xfe, 0x80, [], 0x3f}, 0x335ba449757ab78, 0x80, 0x9, 0xdf7}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0x40) 07:24:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x46000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udplite6\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)=0x100a24) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:24:59 executing program 5: bpf$MAP_CREATE(0x5700, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffd) 07:24:59 executing program 0: ptrace$peekuser(0x3, 0x0, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) 07:24:59 executing program 5: bpf$MAP_CREATE(0x5800, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x2]}, 0x40) 07:24:59 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="0200001100000000616161616161616161616161616961616161613131313131313131313131313140313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffc) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r1, r2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, r2, r3) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0x4c03, 0x0) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="84a035c74c11a08c0176173f8ee5dbad48c044835d1857d967b7b858b6c925c9076c8efb36d183542626180fe66a", 0x2e}, 0x1, 0x0, 0x0, 0x48010}, 0x4801) 07:24:59 executing program 0: sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="249c362934bbe982aafc63467c655990e20937b76638f8ba333012df72d50793f46ff733348a365193805c9422d1791f638e82148728bb04cb457b6ce5dc98c4839b089448b32f7003111529f932f7c108d547361e1512d85bf1e117684dbcfd4b95e05b5ebf18daee4e0b74e7e363a77a39", 0x72}], 0x1, 0x0, 0x0, 0x4000}, 0x800) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fork() ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), r4, r1}}, 0x18) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x781}, 0x14}}, 0x0) r3 = socket(0x3, 0x3, 0x3f86) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x44}}, 0x24040840) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:59 executing program 5: bpf$MAP_CREATE(0x5803, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x3]}, 0x40) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "ee42c1", "a8a80c9059154b4e254e228450c26eea47341e2949e086daf4ad86d974bf23430caa628bfd4780e1ac6def123770f34ea599fe7c070c30cc1cba501f5432fb3d0960554aff1bc7afce6c252c52942fdedfce46db27fbd1b52230a14cdb8fbd7b8c7df70ee7a390ad2ceaae5ba28dd8dedd0f69a0f162449dd00c7c37db36c5edcea1d2dfdead5eab07e8b5896d88b71e39f3fdc13e5b47b401fcfc2fb2e47d7e8c45aa2b2dfe8e70595b0689483b120d9b80ca1f581a376cf8db8a50d5431f0b99862219b0e4d17bcc485cc3e21c96b3054a6c4555418843ff609d3ce46d6e5fc7345962e4eed22cd9378429a7d72ebec88e51624a742243ebc37b140807438c"}}, 0x110) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0xc0, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000001c0)) 07:24:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r1, &(0x7f0000000080)=""/233, 0xe9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:59 executing program 5: bpf$MAP_CREATE(0x5900, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/145, 0x91) 07:24:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x420802) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7a1, 0x100c0) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x4]}, 0x40) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) 07:24:59 executing program 5: bpf$MAP_CREATE(0x7003, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffff80000001, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x5]}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='fdinfo\x00') 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x5, "f6baadba4d3e7afe3aa7f66816cff096167943877e33594a1ab3ac7c14b726d30c95b1f20bfdb053903d977eb2fcb244b43c82a42a773d7d70057f78a398fa8bc6c8724571b754b313a2e9faf323cc940db1701da2ca213a3ffa623e5266b8d8dad258c42a85d93fac6754b085f81aa888d37bbfabfe703b9d5b38e0856bf609be2d0a669e1c0fbd3d1d04280b6fa7148adbe4b908afabb6ada7ccd7f89b19ac3064b1b076ffa510ff2216eb808927b6da20e43224bc679f56c8921064fc067624e0f30fc97cbafcc4d1b4c727da96556b67dac906194b2ffc0ddd7d2b20fb1ce6fa9e77e26a7baf554fd67879ad4f465e1aea631e0123462a2e2ea5cedd4e83", 0x40, 0x6, 0x7, 0x0, 0x7, 0x40, 0xc, 0x1}}}, 0x128) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000400)={r2}) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000340)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e21, 0x0, @loopback}}}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x1d}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f00000002c0)={r6}) 07:24:59 executing program 0: ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x400900, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) 07:24:59 executing program 5: bpf$MAP_CREATE(0x7801, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x532041) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:59 executing program 5: bpf$MAP_CREATE(0x7f00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x6]}, 0x40) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x76d880) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000080)=0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r2, 0x8}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ocfs2_control\x00', 0x14902, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000002700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1e02000}, 0xc, &(0x7f00000026c0)={&(0x7f0000000480)={0x2230, 0x15, 0x8, 0x70bd25, 0x25dfdbfb, {0x0, 0xa3}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "d15bed3e2bbc9705b4cf47e313d87e15ff1fd8319224c068097df6db088f7f618cd5c14e9f1daa1bdafc9368372bf6e37736f26c16e620fb33a5222de7e103ee868a72e2aa882946c99967feb84d0666723e8ffea95788f28346c390f2d2c0032ff18ff238668a4fa196361ea3dfa57a73957551bb5cf7e2d35361083425d9fc7c3ff62b5e7851040d90ca1c8c0f411082d3041f26ae6da9b26e3053cef490902cc929d15853d64ce4e25353"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "415cd6fdf3f47f2b2fe9c4620fef8d81cecd6a75bee08710f4b56673a20619cfcd1786fb"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "46a0cf229b4d414806d9d332edc00014ef890a358f1fea439a7334efbdd59b64fccd41edf5eb05b90de8197128da06b9aac7b2b3095f1c9c5834e58fbea8ecd5446da35fd1c68935"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "e7f3cfcf638db6b8c4d59eb52ddf32cb07f2fe6aaf82961a88042e698374bf5c359d53e88140d40050570dcb13c338f620e686cfe912984a5d8455fc5e6e40403daece8aa2f9b02e7b6f75f96421cb8bfc3648247cdc200af2badd72004aaf3d94d6a388b435699a90de71b3a4b8337a94eebc2200522d326a7c28bbe1f25753e43439efabcbeba1507a85a90f1f8c21a287a190200c236a3e2a5a51be9c90078f5a7ed670ea3bd41d96e5a36b898576d1f269c4d6eac0df7c7375faffbe6c2171b224f55c3a1ab27f03aa9267395f7351c24edd3990b27dc99ed52658dd925b6bca200afe318646f6f1"}]}, 0x2230}, 0x1, 0x0, 0x0, 0x4}, 0xc000) 07:24:59 executing program 5: bpf$MAP_CREATE(0x7f01, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x1, 0x0, {0x1, 0xf0, 0x3}, {0x2, 0x0, 0x1}, 0xfe}, {0x0, 0x2, {0x0, 0xff, 0x6}, {0x1, 0xff, 0x4}, 0x2, 0xfe}, {0x1, 0x2, {0x2, 0xf0, 0x4}, {0x0, 0xf0, 0x4}, 0x0, 0x1}, {0x0, 0x3, {0x1, 0xf0, 0x4}, {0x0, 0xf0, 0x2}, 0xfd}], 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) socket(0x29, 0x1, 0x8) 07:24:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r1}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3f}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x7]}, 0x40) 07:24:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:24:59 executing program 5: bpf$MAP_CREATE(0x7f02, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:24:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:24:59 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x8]}, 0x40) 07:24:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 07:24:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000001c0), 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2}) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x2}) io_uring_setup(0x721, &(0x7f0000000200)={0x0, 0x5183, 0x8, 0x3, 0x3d1, 0x0, r0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x8001, 0x9, 0x0, 0x22, 0x1, 0x9, [], 0x0, r1, 0x4, 0x3, 0x4}, 0x40) fstat(r3, &(0x7f0000000140)) 07:25:00 executing program 5: bpf$MAP_CREATE(0x7f03, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x1) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x9]}, 0x40) 07:25:00 executing program 5: bpf$MAP_CREATE(0x8002, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x82240, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x80000001, 0x200) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x241, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x400, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/341]) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x8c, 0x4) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000140)) 07:25:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000180)={0x6, 0x10001, 0x1}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sctp\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000}) 07:25:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xff2be9584f3cc92) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/raw6\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xa]}, 0x40) 07:25:00 executing program 5: bpf$MAP_CREATE(0x8003, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x200, 0x4000) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xb]}, 0x40) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x80, 0xfb, 0xfffffff8, 0xa, @private1, @remote, 0x8710, 0x700, 0x401, 0x4}}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000380)) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000340)) sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2c, 0x3, r2, 0x8}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)="06837041c8e99fb8278a87e47df09aabdce58141a41c2fc74a3a5ca45bc1c2a129facd9b365e0622181d2b4214783e8b7265416157c44f90ba56bc68ab9230e5c64b43a9da3649b1ec82f6ad0e636591799a44e00624b19e2d1b47c0e37c2e3b75fad44ea0c5d67b073bbd5934bfcfa0d1b36623c1ccf0ad41b230a69680d0b903550275df15c12cf395bb9694d87c7031766c49ccb8af3e029d73a04983b74990723d6bd2d53235c4", 0xa9}, {&(0x7f0000000200)="27b2c2a87c4cc9d0fe8b89bc5a6bb9c72df9bbe8c567c05dea56e28870b3c0be660b9575811a4178eb9a5c5293574f7446e26292b2f7dd758ddac05c4ec6e11f98d94ffa7e8a48f8b00ddaba23195174f935ecec7788bc9b65955074b7b40a812b6c22fac21059b77b1b38f543d1f52580554f336ee3e309e6493ac0d6c3b5a93e1cb707584058928695", 0x8a}], 0x2, 0x0, 0x0, 0x14}, 0x0) 07:25:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x181040, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x65221d5e}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xc]}, 0x40) 07:25:00 executing program 4: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0x8057, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c05, 0x0) 07:25:00 executing program 5: bpf$MAP_CREATE(0x8008, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 3: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, 0x6}}, 0x18) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000040), 0x4) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xd]}, 0x40) 07:25:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r3}) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x1f) 07:25:00 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10000) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'fscrypt:', @desc2='e355a76a11a1be18'}, &(0x7f0000000300)={0x0, "9fac7fc26723055c2552a901b5f408e921f00216fe17aac98439269873a2a0c9fd42159515090c75b0fd4ab5367c57f93708ed000d5e4f5a7115ae0df484f963", 0x32}, 0x48, 0x0) add_key$fscrypt_v1(&(0x7f0000000180)='logon\x00', &(0x7f00000001c0)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000200)={0x0, "15b4c38f41eca225e9212f4e671613c5c865f93e4e8bbd149092bcee81cbb7115e228d2cb7ee85f08288b3026d26ec652232e8c7cb7aa60f1b1263840f599131", 0x14}, 0x48, r1) r2 = gettid() write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='auxv\x00') write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4}, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) getpid() syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x4, 0xa00) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xe]}, 0x40) 07:25:00 executing program 5: bpf$MAP_CREATE(0x8009, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:00 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000040)) 07:25:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40, 0x8000) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:00 executing program 5: bpf$MAP_CREATE(0x800a, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 3: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x4, 0x1, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x189420, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0xc025, 0x1}) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0xf]}, 0x40) 07:25:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400400, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001300)={'ip6gre0\x00', &(0x7f0000001280)={'ip6gre0\x00', 0x0, 0x4, 0x75, 0x1, 0x6, 0x4, @private0={0xfc, 0x0, [], 0x1}, @local, 0x80, 0x1, 0x9, 0x3}}) recvmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001400)=[{&(0x7f00000013c0)=""/33, 0x21}], 0x1}, 0x40000002) bind$xdp(0xffffffffffffffff, &(0x7f0000001480)={0x2c, 0x2, r1, 0x2d, r2}, 0x10) 07:25:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000040)={0x8021, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x10]}, 0x40) 07:25:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) mmap$qrtrtun(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0xd, 0x50, r0, 0x1f) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x78443) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:25:00 executing program 5: bpf$MAP_CREATE(0x800b, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 07:25:00 executing program 5: bpf$MAP_CREATE(0x8c02, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x8000, 0x80, 0x5, 0x0, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x68, 0x0, 0xf9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@cipso={0x86, 0x32, 0x3, [{0x1, 0x12, "d77cfab226a49e17612798f0a2cb2225"}, {0x1, 0x7, "17d70d3761"}, {0x2, 0x2}, {0x5, 0x11, "e5849acb7b38e5712a5bc72e23e3a8"}]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x12, "c5dff3c60c2b0be8592eb809d89a85ca"}]}, @noop]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xa, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x0, 0x9, 0xb, 0x7, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x401}, @exit, @map, @exit, @exit, @alu={0x7, 0x1, 0x5, 0x2, 0x3, 0x20, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x6, 0x8, 0x6, 0x2, 0x4}], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x47, &(0x7f00000001c0)=""/71, 0x41000, 0x2, [], r1, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x7, 0x5, 0x79}, 0x10, 0xffffffffffffffff}, 0x78) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2, 0x0) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x11]}, 0x40) 07:25:00 executing program 5: bpf$MAP_CREATE(0xc903, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r2, 0xa}}, 0x10) 07:25:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x92040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 07:25:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x12]}, 0x40) 07:25:00 executing program 1: ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000080)={0x1, 0xffffffff81afca0b}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}, r6}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, r6, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000180)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100ffffffffffd, 0x200440) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/244, 0xf4}, {&(0x7f0000001200)=""/120, 0x78}, {&(0x7f0000002680)=""/173, 0xad}], 0x4, &(0x7f0000001380)=""/32, 0x20}, 0x40002021) sendmsg$SOCK_DESTROY(r1, &(0x7f0000002640)={&(0x7f0000001400), 0xc, &(0x7f0000002600)={&(0x7f0000001440)={0x11bc, 0x15, 0x200, 0x70bd27, 0x25dfdbfb, {0x3, 0x80}, [@INET_DIAG_REQ_BYTECODE={0xcc, 0x1, "4c93c23ed09c557e54eba343eea4d77504c656fcd70e3f3e5864c8106806803d1828b1023e94555d5d06cc42b759a8243b7a07fe9fd83a08224d4b108ec61040ed7d8b706e7c319031138b0749add0f02297e261d26c4ed6e5b50660c39bacead830d8a561eeb0e95dd242182832b2b7d6ee250448a2870db1caa06fea6dea122ef4cfa3a0ba59232b1e8d9bee18ecf41323db3790fd26f28221059f70c7ceb962b353919ef1f73ce9e33572ce33b76c8c0bd6771c4e27a603a72fde08a123c8d616496986dbf588"}, @INET_DIAG_REQ_BYTECODE={0xd8, 0x1, "21d8482616dea60e120429045e89c3065e0bceba3b7c85865cb582ade3017e12e9e8fdb4a18c606835eadca4c8d6545f879625654c22d0f8d991368d5ed6ba6c0db9f8e771dc469887c3383c9972566851ac38bf8e6533fd810ebe2db6242528cb7e6ee3936659ae7f9fe130b9acc5ae79e4ba7d5ed05935e425366f7363b4100e6b32289de1d4fb74d1cc48ce9ff4c0c2904703c956111ca0f71d7f43cbc7ea5270baf25c78824b04d11a7e80788ef17626f7c4e7197cbfde87b7edec2e8b6b9ed14a5288a18b79233e5a99c86dca4de50c6f30"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "660203fab32d7841fd671b0a1e3b76991173f64f3b666ea304cc2e7e83fb576fccf315a81a7e6f45c6943cb5e48b0944d80402b5bfb56f72264f2a371dcdda9825e9384df5c16a2f712205395104fc9b7425887cc01cb476f8ecafe91d71b0d5ba0249923673e27cd7e3ddd72a8acc92905794a7d567eb54fec793b5a943f7e542e647ad5fce3ea4fc6c9a936ca334844e3f7236ddee72845bcab431df3f3463fee3dc6c44231e52c54590e8e4ebb091e90273d624c0d85bfef4676e7d2a7ac9bc6f8bbc44cc36c6579e00a064505af95be590acd248286a996cf59b0dd8a861d7e6c138d23616b2a1fec387f2b6c701d402fd7bf49cac8c4ed5c3f61dbd095551e6a0121a9a3e07a352920f25856d6c6a6d63c6955f185172d60c7df9ce25d46c538b1f81ee1d44922ad076200b0808396d63ff1505909d399538dd703eae356366a0f0cdacaa83950187bb3444bf5db92a88a915c47acce3c4b4a32a4940e57ea99757b077894082ce63cc374417b47ce9e051345a3bb992204c64b320125f3a1b85c77cf640337b15a539c3bb4721e9a1700ab4beda0c5e38e91f19c959b6313141f148c6d76f38fc56149914291108c6ba31cbccba44b8126761e0be7ce61e47d92e423279d14370d1ad0604edb20656e1e22595786f85e504339de65e19261209b6d59dc6964d2cd24f498c788a92909386e64b1bd12f00ce1cbcd6dcfe704865b28c0307deb5ecb797f1928ed69d1f8694d3dc2b850b6ca8a32cc67c8becae392bb1e8d0d244cf4f8fc8fda03f52eccc1a11f814150979434d35fe92c0f5269bef6bb4d7daefc236c456937c09ce2bd36a3db3b81ab3d2babd52bbfa2660bd253cd68d067834ffcfd2dfa0e3525875f9d3bd1e1a8e0db04de7c78fb3e4a89292fbcfa39f024ecfd631efbd65eb643cd1457ceb686683a54cc3079e536d0b22ef66cc1eee4b2f64713a231564cddcb9ae020efd3ccf5ce8e5738549eae4135159f1a4ae48912795ea92ebac500c3eb2efae952e867899d6257bf1feea30984d0441b1633975db1f7870d7d26aad599848e7a547222160025db28e7eef766e6efdd7a9049ee116c0e8b3076c68c501e41e8a72655e06d31c5a35c16c5b4b4629dcca6109a282240b0d0cf387bfd8717d5b0b73d953693f396a5c67715e772614249e5127aab613cc003503fdff67c2f3a18f8b174026b0b2b854815fe9cdef6e3eee057bba5c6c45e2df42bf276494c383bb9ceede784e407cc8a104744fa5e4947bc1da62adb8dd266df2d097ed510b92a8006041d99887ac466f9ef2c851042c9ff1276efe680a608108c6fc0d9794cb042a46ead10fe3079b8464fbe37774115f79983ebe9ebfb51db89dfe67cdf4a38d4be067dbb274fa9db3fe0c8b28c3796ba4d662018d3f10e9363820d4d20958b8ff8b7098adc43f923a31899cdf9a8a91ad7cb75b1db716f7c6b88ff83d28a0c8a4644856f47e21c8728353860ddb1261bdeb36a277a4ca6039af1e61a1280b015fd9792867283fabf352a1e5ea7a3330a93970a1951288b3e8e0fcf108b99b0aea6df8dab6e2e8bd0cdffc70b028a52d9293f6f612674aaae6103587ec750311cb3001c6c914e80fa6bf4b1413cdee35a46cc123479dcf44c54143c73c72ffa573d6ef6b26fc2a5c6b84908d13edfafd5cd83a309ccf4b02daeba8c0f4246e6a52aa4122d123c8b23c02ed5ccabdd0a29230bf1ed1deb6e63c67b653587047ce7d94264b6feba77cac6b81a6f960ef7231ebe3b6aa89a6ea5a18e970c7f908f6570d3de5a7da0317878aa52cf7c16f24d6eed69ffc1eff63a89eff65568e9c988fea4c1443032b9b40b19ca34997194576ecf56fecde110c75c2909139fd89a88f4464cf789c1fbb5f24dfb7afa569bd65994f5447e099177d5efffa7e3362d878cb5bd1a3f3c41732d8566a600691450f894e0e9a9e95ef2974a5fe54ceb21892f19ac9126c9c0b17415b7cb0c940641b6eb325d1d621db976597bc916fd8610ef7d5015cb1fa37b624b969dc601150cc1e8c033727312e5a6aec5381b57d86159dfeebe35523cd62c4b9972f321373e50d06ad67b4020b726467811f4e796c9071a80e5f4da757ebb1b75c38eceb08a9e041df299558994d4458d3b28c08efd372c47b3d56cf15884de03a74f398fa1dc60ca6f0075b0bde83983dc0c3c69a6bc1c0e68304ba84c7a38176d967ed1630cea9ead3f921e3383f186a97ec246525dec7a8e4e67cc40a814db855b3682e7ff246f10e898656f37ff9b1c1075d6948d632fc198772d34806fadf9508c50f5530277988b9ea8bcfc1d0949300ce35a957df438dbc6707737cfab3d966307004c993116edccdd6bb36a2fca4bccba03e94961b4e1181142e384b8237c49f829a7f996b13e565e217b216c223776bfbbdc5f942e520e43e0e57da9c7b26e30f1a0b9310522eff0add984ba60d3344dea4e7d3d0c250c3a9cabd787b4e0d831dd85294f0ab2f916d992f79f3ce37915fde994c68db54f2c41eded16cc0ad8a65c80ea3604a8958aa01300ed55fe25eeaa45ee8ddc9b8ba970ecbdf62fb906559cb2ae091c539ebf7eb7ef6dae620366bab571a18d67a76cd4fbae512ca865f5650089471318ad0d7dcf4f115b15ea9c03cbcd8edcc12a10ee199acf073302c34571f762e1b19ea1a72476c506e32a155faa1446b7cb4552b3d6c641a2bad4545219fc7cc229ec9ddca030e34b0620fc0b468990cae8d972dfb9aee51a20e7931398de8ddfbe729ff722e33c9b5999c184ef6503c5fd8fc97ba6e1c76c8b4bc7a840cd494e17a0f0db2b3552f6b2e3e7501b4d5a57dee3a174b3814fb6f4e985f4d570da5a7e32c5b0e627909ea276e9214ae53f0a1a666489253995554df875e7d6a9d848f0d834d2e0a3153213d339f02c6f986b56e56ba6ebbc83d07725643f8ab0c5091ccc32cfb764dffb174fdf6ca74383fde6d91d6a9a3da2fc6d229df4bed3744ae2f14c311a78e979ed37633c81584d2c801a05925bd2e66094a59c7864862c8f4271d7f9179d76cb43acb97f51806f933d59db2bdf4be45b75b49d223a38c18649e978e6a55d7fc0650126b23e947abb29e62d45f18bb64e719918eb2fa5aa89635e48badf44caf590078c2076c8a02656ebb72066d0dc9d27ba8f248756fd9f64a64cc598b03b07697e965d1644f61504882828aad672e969b9e423f95c643824bc5f54dee35b8b83beed6f3e3725bb728f85a9459e4b0cd8aa90912ad1a67d607887efaa816bcccbfdb452377ad82a4734c91a409a7ac79044d4dab96d74cb4b5783353b961d6714b51fb2bcb7bcea155758ee974f19b0c3591d6495f64e46f70da2a062296a9665831077998551398a1f333a1e3144e4428383e416b76cf5c21aba28933928d486735fd266f252c80aebf2c4b71dcd2fd199396c2d6a9cc321ecd8830b4cea466eec6f42a3ebb6292da6be7495068a28266a66374b85b783682763fc8512d6dc390d9cd4b8ae726ba3743c52459e5c0e08534cfe17d9ba51b4f882db972bd7bfc73d0a3938ce0ec8e4b75a139bea52e5ebcdc0b04993071ff19264c8599e11790a55b53abd8a275d11978c0903b40d8c6316c2764dcc16e43e0286b88c7239a496aa2f7ff63ea793fd29e43ed171ede7188396051f80b8efdb381fe45f93812dbb87a4f02803c543beecdc46c67b5d02409ab9e52387022b2cdb184f0637ddbc27bc8a6859c50058ad6b86c7e9f78ea88eeb7af72161ce4211cee213ed236368c78c83b053af22b3db2dc1a5d52719a009fab2da932c0b7f844dabba298718d46fa105e0afa168739c4f5762c0be495778fcd12e262826a91a79e7d8fd7e80676f9996e78f88b237ad6dc9bfcf6b736b81c576015ae52dc4ed8b7d43efbc599faab1d2ae8e776ce7bb801462278b875d74546f4461fa4458a26dae0f611baac7f712800f54b45e31062ed856441fec83122340e4d058038aab5a425b4dceb9ad83ef37394efde26dcfe522ed89691f515f25ceb6c6f3de0c3a39ff7cff0c795765bed0bc4a1595bd77f360babac27cfae79fbbae5c8c4bea000e41ab2a21f6d0b12e09e82c594274bab2845ded4134b666c85da549f04260c1354b215945c44aa6333db261f98c0586dad932be57fb03bdac673d1dc86a7e1b6e62fd3be28e2e5519ad6f92401610d6dd2c42f94337dc3d8d159bd6edf85f714eefb99c2b44aeea89746aa37751b0b84da3f60a3252d2fae38dadaeec7e745267865cf8f84009eed1a7ecf3bdad38a0d0402461bcec3b38e41df0191b3a9ec484132fbf01d1f639e3a70320282371ff60d23315fb33d1226d49cb950c47b6687a1b5d692afc1590aef7f99352b3a70ed7ac97e9a9dcb1f0d0ed5f12f95f976652c0ca196128d69e595f0774d5bcb2c3945d8b5741f25525266f1a5f5125975fdccbca58dc4b8740acda692873d95d818c07456f37ae69f773a447a4333d7087416b10d016e5db50863853d3e1843f9ab5641c93373cdcde4c385d331ae9674d96cf38c64f85a68b529c8f40d31c295ae7a5396898f4deb90f0ed0f6947b32fbff1c227ac70f6f98b7e56f60d74695bb0816d9b11ad3c39a5570a5dc71c9737faa6181297d9b2a5f7e93d15cc1a059a2140d5b84029849f491bc3b090f3d21765c9a79ab7a914bec3ec4bd91718ed6de2bf6d3ddf8694af31b11cd2b46c13dfbd739cfa19652936ac954d9544743e5142239eac8dc968deb16a052dec11791227c1b9c5443398763c38f6bd67fd10b277ab4e84590ce9d2afdadc101c93e6f107193ce970219e977a535b3dead823bc628331fea355f5dba8181aab12c0e74a7c3d7551418d532493ebce34596a0fd65aa2ef489ef7834f12f3d0f47a1fdce798a3263291c9e928bbf088262d8c8516aae518a0b433a6d4646f0e91b8ccd1c27ac92df5b6f69b60cc2f72b2a391935f5804d0973bf7d6637e66d2f5fa33817cb0629601f75557a06d807e2af5877504e58dd2fe9247148c6b6bbb199c73fcbb81501494e1230ed53a2014e8b2f10140ea2af83bce356cec8f1caabab89d10015cde582ff12a743c47785c5448cf7898b9fdd43f204694d86e876f3b5c2cb965c9a8f22d308e6755f82f3a4007bf9c87172908d49307e626b71b39877011ea59f3a9a63fa17970880d200cde9253b2dcfe2a4b9b9dad34c56b170cac02653eaa5d1859c4ae65af00ca28b150d64d30d4c546bc10ee0cad613368dcfdc953e074026643865a2b6069e5026b1e50464c152c70599a51b71b3c8fad957d39870282e3678ba5656da7b0a10a0296cf4ea4e983ee2020709c96129a10aab5e67b9907750911d10598addec703a3110e3e2c2cd3f22cca75c5233b64f253afd88cfb4e70d81936f6edb0cab6345fc94b5e09ab35d4e79d232e0f9fc6272f7e306621c032ad52a5abc52ef86be513b72e22f8c182ca7969dd2e63199451d52371df06723fd2106b18d2ec8cc2ab9d3b5662c6dba59f603356b42db171bbe0ca34d9d70250bec4c07ea8c5a91303f551a05e7fcc1860e785c53528a13929f3c04ba632704f9a246400c7e4e05ab8ac502141b680cefcc5e78d1644606bcf559d61506058967f0b00438683e9992a2644fbd905572051ea9d9244fe1044c11287b13637532f695ac9bbf04e968febea7f565c43640514652efb5a4850c8bcb61556b7992127f93f61aec4c12afe6944031ff651f4aa6551b0c889e8c0d298f71e31ea25c4cff924bd935eeede2bed18813c5ea2a6348979ce699cc1"}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x841}, 0x52280fc525a4df31) r2 = io_uring_setup(0x2694, &(0x7f0000001280)={0x0, 0x45c5, 0x4, 0x3, 0x3d}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x800, 0x8b52a38c5026156a) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x800) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400, 0x21001) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x13]}, 0x40) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xa1bc, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:01 executing program 5: bpf$MAP_CREATE(0xd902, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x319200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:01 executing program 5: bpf$MAP_CREATE(0xe603, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 4: keyctl$describe(0x6, 0x0, &(0x7f0000000040)=""/248, 0xf8) add_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="5160a690118d71b8767740afc61e50a4fa6e32bd5a7af128e4834b86bf790f3dea2575d294c7208a47d9614cb97fbcb5d99a6f8bbc9ade88296a39495c421c7bfbc50035df9134533b6c63359690f7c5bc19bdb72a2a67105df08c0e9c1fd537db9cab95786663e823acbaa3794e35170db0510139d9105fbfff2d5ca392643cbd060319d336e9961147f33550eb39afa3fdeef18225240234e011338e5248b5207254f47b248be5f40d57f8e88556446a3f1696bc426e4e510232", 0xbb, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x21000, 0x0) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x14]}, 0x40) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x88000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x200003, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x788f48c2}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x4}, 0x10) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:01 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0, 0x1000, 0xe9}, &(0x7f0000000080)=ANY=[@ANYBLOB="3d77703531322d67656e657269630000000000000000000000000000000000000000000000000000b45f357f000000000000000000000000000e00"/77], &(0x7f0000000100)="5fcbf29da278f981ec0b80a1574380d28488d168e6ffc7534fc449cab10b10804a1a9d5ddd3717ecc6d539fb06b5943ef4c32ce114a6f6675d3712c3817e01260d9be60777df3095bc0a245d9b4b374d7f2c8eaee1b7832dedac479a384a390b5878b7047d7e904379e0e0f144d424b0b9f8d76277b529bd949fe251d521d7fd68877e992e67c0b05cda88f6e61a450ef276f0ec9b8a3a1447ec034875115cb59686fc156153bcd5408347676a0e860a6fcb118e63e724a6263d4f0b202cc4f147a9e327aac1c2c2328a1782a601ffb957bb482688bba4d8164d1a58f6a9c2045f023ab769ed82dcc7570847d3f0cca2c0fb84de3abf737aa289bdd17d83270bd5a0f382c0cbe45f3693edaf7cbfb06fdd4dd9759ca316cfc242aa3f4fd3458f972c01aaea4be23ac1617f9fbaeb7a41e5073c3b26da04bf0a417678fd9a31c7f5fd854960f9fb1a7aa45fbfac4043a01c129acd0e7abac23fb769e011d62668e5303eb77dfcc4c82dc2d5fd2187c59864037c4723fad9654855eaf7159e4f1c385f06c9352b2582264a9bc54f0bfc66eaa02374e82ee2a1e9e4ff4b1129d35607587bb2ea3c3a36f590ae7c3aedd47640e72285fc8fad80d20642016577df2cc70e93c60440679fa3bcf2df42245513b5597ec519811c91e1aa662613459bf272df4ad4636c6deb7f11850498cefed0331cc78cd7d966d57ffd450c9cfed833f0fb82c929e16edad5130c4ae557b7c7db6cc5aaf0ef10f28144b157543717cc6be84325b1c3bf01ef66abcca55587940f1a3031587baebde0d5f6fb1d49d3d7ac54fa5a4c23a7a4e6e57b82f5154f9162f0289eeadf9d483eff51f037eb8da26b0faf3c4607fba7cec059c02392a9aaf1b79824b74450138d778c8708320710b20161597f3ae6a03b8150f0ada9dc44e065401a6f2b9282ba390d1c4450310a02d0a89a5318c39fab0d429b964877538396075d696d6927e33c2be6c774f92ceef8ec9f048dd32761b2f787d5892899249f700b7c2dfdfc3f850ec7001921be9b34f2ac2cda31796c6aa14d4159538e6962cce55f9e80b5d8825afa15f58494562f3129df94afa658c665af1a220848ff0289e5b04e889417251f2c76aa49fe71be946f6bb3b2427c98c7575853f16e88b40ecbe1569bd64f0abea1766859e6974ad19a1fda587514e91dcaebe9eb93d230323419c09d4a2ea4b6f8051c2125325572e869ce3ed4dc2caeceafe75a6af045854ce05cd7beea7800a993692240d7f262826f997f11750d1647728374ed18ee3c873383f9f1e1b1f94e8bde71d24165afa1146b460d2719f8ba5d87f04e1c9c9db6140edb035714ed5372bcb15d83c14e84592e3696eab8394d6d8d0c5d306b3f0f99ddf21b7c4ba90c2624a660f82b68a536a2b02447da4b5dd3fd7f0b5ebea8dada0f7b1a5d6cb5b27715b05be6e514b62199d4764687ff95e8e96bc57c79b52eb98d1581ad9bc8ca27fa4ed05692c98d2618ee2b510a046150ccbeff58ef83aef1874594ede3bfda9cf345634ed38972384f421ae8d40e577074388d035fd6a97386b0d8735af5b9c8c31cdc8e55fa5c15879a735e3aee9c50bde4fc91f7ff63d879c1c0198d840205c7b4c652336b360fa05dc7249545a5ff1bfe315b0724bafe1e565fe76b083390455a2041124889abdb28e0d65c34ee64da70d3c26a049980b2b3850c790a30a5ea2a5c5dccd9e3bd10b6a9c3b0d511e61b67a2141be605c8aa41c30d773f427f759dbf5f92c5be4a807e2d9ccd3c56b6036886c63946d7d1c9246a5e54f78fae050781db0659fcf39eae2728a0074cfbee6833f2ee427e248bc1b8b3716ec609e1165abd6918b9bb8cb47633a5239d544f93736fc69d45bb24152db15fd1057a728a59334a9baf882200b2fe8f300134f082aec61bb8e811b8041a9d42cf244cf4098fbd3488b63e222c099fd80910dcd00b1bdf183aaaab9d1bb1997d6764479abb56ba25676a178bbc3d58e0e4dc55f6353d7a61ff4c8dab76add1e337bc0e5902957b2ca1449557936b480435f31d7cd92d5174466249482657848d553a0b8500a22835536e68bf868fb1bb47b91800551ba1e318b94095cea022c359697b085c3f95779e559e48bcb7d124beb2c5f362b5ad9c1af84244715fdf961cc73528d6aaec75da5b4317d64c83570f55179e53241e79bd6e0acea1053c16f47909ac4cecf440739cac5a21ab70edbedc54163f46c6fd78b297aea831c2dcb24ac2fab08c9fd76cd4e76b495c08fcbda503fa7de918dc2576be043d5e1eb442a816e54c6993dbd1da82e62f4aa29dd8b80db8b986087263424453a4d9a567a3300b2ba062aea8a660c399c96dbb9ddeb831059914453ed358f25d1faa2018bb81d09b5a841004d4379bcfc55e82e03ba73146e605f452d615ca452f07c53ebefdb73a5968824bd05ce9e4bc84927229a5f7f081919928992be7297f9f1d35be4d80ccc6a84e0d19285a9e5cf33668695984793ab746b9319c73f5a7a323d9584ef71f14a4c7f626c5d46b2448bc138580a2a5fc9814f00f5b0df69ce3c68d87b54042fab1f0f75d7b7ec17765b51228da95704f6107db453c46ee1e2f22b02f3d51f1d59ed98bbcc33215dc44fffe33684d2b8076c6e5af3d9e0cd6a7b1008c6baa0b7c59f071d818146d2b65fe25003d977f183e57d659f665439ee2bb1064e299241377ef212c1ecff9cad77ec804f7809f9f0f284cee6184d8c77acc8da3592abb5fcd5ee1ed5c7bf30f1d395119ef725249209fc9ede5ef9fe963a15104889c3ad5a3397d091438f64ecee0cf4f9acdc2563880bdf67cfa05965501f9d7713fb3463cb70092b1b6a467d87f02121444b60a410a4e59a7d3d04b2ed76d2477b2860fb6e4e8fec7f40760f0a758cc75cbd04d65180e596f0efac2a8d5114d9006a24725ce675e781a93864e9f0d479fb5965d9c9409b19d104d619a290f7ba3e2f1b0e4d8a630e38402a5ef53e062f431b4a7833bf384ff08a474bbdb1cc5689123d56deca040f25575595afec056a30afd2f9ad2addfe3e6b672687cf39f09e9e36b0d7ecb72055087ee0ecf79ecb8f8d96bd97568d3c3cd772b8db43013c6f2302b3ee69420d5cdcd34d0768a33a653a8a477a98457ac60b8522dd17bf930d4bebbddfb71a46fcb1fea8c00790a124056c1de169dbf4e68dcd0f43583005bc66e2404e1261dba15c37251f3e0b20876d9c78b7a8b59850ed64e87f03b84e3af9e3b1b45de85f576992fcd0e121556be988b0308bbfdc80c230e262f655683b02439d0b1e96a4254ca7f541bffb745818734e14d689346a29a33a4845d5ac86c7b3faca9ae310b3b6c4097029368001d1da9f69e0a43a4d92ca6c8c8ab2f5a1446596f7a61b8586a2cec30cf609c670e8dbcea5efcfb4ee9f2581fe8867596e505ae20922f285da45e1c287aa4cd347a394473e8c307b8f36fb611bffeb73eaace784464312b06d8a9bb2a8be79960f173a7f12495d2bfe2a375e5d003f5ddb2d00194e8819c6c198c1e5053d2b990b0edfc13b3546709b26901a59c645ba43654ceb0ff42bc8e4733b34fbd3a7b80fa657d4d50cf88a292dd3d3fdf9739ddc3d5a6266c68e7d4791ef388d90a2af636f9bedae432c3759560fcd11f129ab191943cc58112d035bf5bf1eff57f002446065db98da8656548ea20804ef270f7f8c7c3ebe1e0194aeb0973b3a697719e7e77bd49fa035505dc869a1804270a1b872dd38ddf9cd137ac391d4d219521fa2b61ac717dd3d1c6532dd5c1421df1a20a55b38b52bc7416e17041f72d2f262a2d42a2432944cd39ab05f84637f648b0262a1d1c1919a78cbb995e0af222f3e9f35151b337e83133aa4d64964751502b84c7e09392658727343cfe73a527a6ffdbe16ad442c76583238cf59a43f2dba3741bfa7adf265ab891a178d01f881d547da22d4318d205890572c06780d0016db126a464e171a55570c6adb4c9133e8d85684c4faac414488dcb4bc504d33bffb5f2d7ba4c88a18f947fecfc4a2925db0852725263406038118f502772f5dac6926b0a3ee0ab627b28bb3b136001fae7d0bf533e773b6528203a9164ee2a7a203dba9202277ff8cb9e0c53a92a197ec9b31331dc48dd65de5abb604cb37819d11f64325d5ae8162591d282f0c1f962722a3e3600f3e60317b11414c55488f893a66cef4cf15b5009a5ec9dfbd9a0f665cdcf21bc275cbe80b8616227b6217c072f4cc0cb14f0419b60977e33f7e3b95eb941b23e908eb371198c5be6f91bbd8c048a02fd046b2509e13fb46f3f112655dcb88fe33ee6df4e2748b338cfd7c7c722f5e6917543d9de32c19d4c4f1a31f2e05817c8f9b33087f9e5ac7eb7bff0f05d87fd35d147302ed5ac1c9f98bd63ebecb1068b0fb49254f895248861a6cd5c2fd60272941fcfa86cc5df0d61ed76d52b10b85b0d684df45866fb1baa9adebebc77e6c0a65f0fde4614c26b6e1821b119fb957735ebf48d2b9add73bcc5cb0f5defd9b2ee1912243a4caa55ccb49c60d87c1ebf06c04d5f0fb153d0e331f05a3aee2a18e00d31ee2124c7ba5cc626770a63b5e94f46602d8f4004a123e4bb7e92a05d0059f8936abad5af84bdd81ca869dbbd3e9fe6b795c83559c150e886c3b36ccc05fb05a595e15a8489161f46ebcfa7cd2b42d1a4d10fda86ec6687c14d80fad5a8fde5739ae78652a55ac2c0ba1873a81e7aa677832c9658e59d9f45b5bac1ecaa2e81db65c4f85952a55ebfccd1c85c40fd36ca54bbca4660917360d807e72ce5b1696c23f6716644117efa4afe5c191a4599a8d51b2c2d5fdd625b27fbcf749acdb3bebebb061ac42fe927642709c69085bba79da992dac73ea918d6a3f0b6e1ffd77a890d1897279ce1a0d361d0413cf34f5124b48a731c4ba77a2fcbe2bbfe6a683b751a4bc5b3d2de18c11a8d2ca15446365228b388b5e5d7e663319c66dd694812fe39e3e92fbba1ad6f91c37da6ddbed6ed261a2263fcd6a93c0d9b391826b50b48674b261abab35bb001ea6cc0ebfe1c56a9f520d9110eb2ec57bef3bf8792da4abdacd65f8c5ced8f1ca1b6fc05bb652bfc4aae08c7d7caf007d93fbd0ebc41d81aabca4fc856fdfff66d007c38e1f2f5f11fde536d63ebc456d3c560ab2340ac936f3a8571b8c93d9096cb6acb90b7946ba9a9361bd9461c40e4ee8e5e1e78da96b9787c7a0e553c7f12986d4efe3bb8a46785d2841fd985ec253f98d7b5ea7d49c5317285a2940588a97bc595922c731f31a0f9ce693dcfa96342d65bc2f7bdea9397d50ac17ca63f833ec967b85d93dc1567704eb19cd538004ed20063247d66eb1ef7ce0688005fc6149cc85dd63d991656a6f487b00b5e6a766bbff0e3113ad070ef17993682b92b5b3fd873141afaba1c094cab0d959f2c034cce1ced3d7a71b07d9f3785bd500ca84205e7c06a8bc14ef94448db7f307aa210f498261f01acce6ce0e47f34ccc517dea3c6510a0d736c1b384f19b16bc372fb81dd76d34f76a8f573b34eba6b24ff083250f45087195ba00d33054a37663fc8503e2b9f1bbe4f03f9dc945e90e9036935d6a1a571ef9e151bc0c410fd6bbcc6ef2963ffb0fdba2b3143ecab4d48653ccfa209a5479026c3e6e67a9cedb48e2d2e02b622e48575b278c9b43c2cc37e8770049713ea17f3753866e87776b31e0c7c2676199af6da96597615c4dfff91d38da801ce1041b35da0e7dc2bf116a7137342e7e355303ef387945a12dba0a769bb1115979badedbb9692c80264742ac5", &(0x7f0000001100)="2e66bf6eeee7656c2823cbce5793056f16f103279554869bb65ab7e9118b18e6f94e75f00a9bf2b76c43ad2080cfcb864c3a2410ca438a208dd005dd3d93af0fb855338e26ce93001b9bd8845efa9e3320c9704fb90326a0a6795ee3879b0c9ab2fd5d79e8fdfac222ebed624484b66a27eac9c716dbc3cc9b37d0a6112577aebc503b3f676c18bfbb7dfde8f5a8e11e551f8f51278e1c07427e13a810600f4f9d148116977caf230b32b81f5abde69622cc8ebc918cbee6f4201a52dda5e8de2ecc62936d838da2688a0e216c0ab8de1a811fc95eb632fb02e91e97698977254a9441b438ff35ec64") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000001300)='logon\x00', &(0x7f0000001340)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000001380)={0x0, "d21eb56ecbc784c4dbddd773677e1bda605460d6b7702123cb82fa5a7171817098e886b1e01b92b56d201d76dd248387b3478d501e6b78ae2e479d9fd347d510", 0x1e}, 0x48, 0xfffffffffffffffe) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000001480)='/dev/dri/card#\x00', 0x8, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}, r5}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, r5, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000001440)={0x11, 0x10, 0xfa00, {&(0x7f0000001400), r6}}, 0x18) add_key$fscrypt_v1(&(0x7f0000001200)='logon\x00', &(0x7f0000001240)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f0000001280)={0x0, "dab82b45b6b0a8c90973723ddad2dc289f489f25527be7dcae9279edeff189e3f1b221a1e96f5b7725744b57be31d87af39c8efe57dcaad66cd4b835a7fa5bf8", 0x39}, 0x48, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c05, 0x0) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x15]}, 0x40) 07:25:01 executing program 5: bpf$MAP_CREATE(0xec00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0x420000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) r2 = getpid() syz_open_procfs(r2, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='oom_score_adj\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) io_uring_setup(0x73de, &(0x7f0000000080)={0x0, 0x580f, 0x20, 0xfffffffc, 0xc2, 0x0, r4}) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)) keyctl$update(0x2, 0x0, &(0x7f0000000100)="ec10cda9d1702b78f8d4d07dfc2956634730234cc1767e5d983c56c6519a25cdcef5383d9e2c20ca2af9b9019b887621b9129d6f5e7a2f36738057a3", 0x3c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r5, 0xd68, 0xfffffffffffffff9) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x200, 0xe44, 0x1, 0x10, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x40) 07:25:01 executing program 5: bpf$MAP_CREATE(0xff00, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x171541) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x16]}, 0x40) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x509041) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) 07:25:01 executing program 5: bpf$MAP_CREATE(0xff01, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r3}) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x17]}, 0x40) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r3 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r3}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$assume_authority(0x10, r3) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000140)=0x213000, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) fstat(r2, &(0x7f00000000c0)) 07:25:01 executing program 5: bpf$MAP_CREATE(0xff02, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x18]}, 0x40) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffb, 0x141000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) 07:25:01 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x19]}, 0x40) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000000c0)={0x4003, 0x4, 0x5daa, 0x8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) 07:25:01 executing program 5: bpf$MAP_CREATE(0x20000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='net/icmp6\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x40000, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0xfffffffffffffff9) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x1a]}, 0x40) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x70800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:25:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket(0x22, 0x2, 0x3) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x8}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5, @ipv4={[], [], @multicast2}}, r6}}, 0x30) 07:25:01 executing program 5: bpf$MAP_CREATE(0x30000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x1b]}, 0x40) 07:25:01 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3f, 0x723b01) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x8913, 0x0) getpid() 07:25:01 executing program 5: bpf$MAP_CREATE(0x40000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) getpid() 07:25:01 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x1c]}, 0x40) 07:25:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x82241) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140), 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000080)) fstat(r1, &(0x7f00000000c0)) 07:25:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0xff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000000c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000004c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x8, 0x4, 0xb, 0x50, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x8}, @alu={0x4, 0x0, 0xa, 0x8, 0xa, 0x50, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xf5}, @generic={0x81, 0x2, 0xe, 0x3ff, 0x5}, @jmp={0x5, 0x1, 0x6, 0x7, 0x8, 0xc, 0xffffffffffffffff}]}, &(0x7f00000001c0)='GPL\x00', 0x900, 0xf5, &(0x7f00000002c0)=""/245, 0x40f00, 0x5, [], 0x0, 0x1, r3, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x5, 0x7f}, 0x10, 0xffffffffffffffff, r3}, 0x78) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5, 0x80000001}}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:02 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1a1403, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, {0x48, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "419c626999c1a9def51d49392a0b46ea0fd5be0d571744257785"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x3e, 0x1, "28a31d9999dd29e26d185f4f7affde5b92c4b7e038db241974b3956ddd635c47dd67028f738ee102e1dcd7807a02d4b464e8c9d355d5bfa3c133"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "cb2274199ea8d1e77762a45826c035e4cc65a42efccdb4ce33697fc3cae9"}, @INET_DIAG_REQ_BYTECODE={0x15, 0x1, "8cf357ffd92a51d253d36b23d18b589cbe"}, @INET_DIAG_REQ_BYTECODE={0x85, 0x1, "4154ad090d97c62d1a29d4311567186add29fa9f978053f0476763750683a95fefd1e124599fb4c673ee26f13198358f9a1093ab0765f8f96fbacf5473dd0080b9fcf38f503f49d751b4f3a9f41d1e722d5f1f38ae96249893b1572c00e3853ec5f63e10dc5227deae16afbf47bdbb9ab0172437c3e7a1285792472bb6ee756ac3"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4008804) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) 07:25:02 executing program 5: bpf$MAP_CREATE(0x80000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x1d]}, 0x40) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x20, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x141001, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) 07:25:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev_mcast\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:02 executing program 5: bpf$MAP_CREATE(0x90000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x1e]}, 0x40) 07:25:02 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000002dc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002e40)=""/53, 0x35}, {&(0x7f0000002e80)=""/125, 0x7d}, {&(0x7f0000002f00)=""/29, 0x1d}, {&(0x7f0000002f40)=""/53, 0x35}, {&(0x7f0000002f80)=""/46, 0x2e}, {&(0x7f0000002fc0)=""/199, 0xc7}, {&(0x7f00000030c0)=""/103, 0x67}], 0x7, &(0x7f00000031c0)=""/245, 0xf5}, 0xf540933e171f4a8e) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000003380)={'syztnl1\x00', &(0x7f0000003300)={'sit0\x00', r1, 0x4, 0x9, 0x80, 0xfffffff8, 0xa, @local, @private0={0xfc, 0x0, [], 0x1}, 0x1, 0x40, 0x4, 0x400}}) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x29102, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/7, 0x1002000, 0x1000, 0x8, 0x2}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7f, 0x6000c0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1ff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x9, 0x42c80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x8913, 0x0) 07:25:02 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x331401, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffffff84, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xffffffc0, @mcast2, 0x4}, @ib={0x1b, 0x2, 0x4, {"c6c95d9ecaf752ef46ebe447890b0fe3"}, 0xfffffffffffffc01, 0x0, 0xffffffffffff62c5}}}, 0x118) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c03, 0x0) 07:25:02 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x400346) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x80000, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:02 executing program 5: bpf$MAP_CREATE(0xa0000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x21]}, 0x40) 07:25:02 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xf8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000895}, 0x4000041) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nr0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4080894) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000000, 0x10080) socket$l2tp6(0xa, 0x2, 0x73) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x1, {0xa, 0x4e23, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, r4}}, 0x38) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x80086301, 0x0) 07:25:02 executing program 1: sendmsg$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="a46eced5bc772a51cd1530fa627bdc221400a33f4fe2fe143948180984d85110bde12aeaf68a0e8841e58c4f635947cded0639d3f0f6f0fd34edec9616965119218b480af677d76e91c4909337003708b512ea181952067938cd5d70408cead4e44bf215c2d15c07a595b80e83508f1de37640d71d8ecf201efe1ac959da13d4e1fbbd27617167f43cafef96dcf003b74d3f0fd3dc1366485792306762940554675e1d8413cc9c784e1242b6d3492c4818690894c373b1dc0a7efde7df479e65dd6f", 0xc2}, {&(0x7f0000000400)="7c7c3f0e570869a864c3bd3fdf0a8b62f34d276cf0df3e71773b334d5c2cbdf3088fc92928abcedf0c3269b8760a125589a5d1e9508b33b3bafff6bfa758c1b04d5e39640d142c5f6bee1155602d5e9b84dd8b60a905e09c6168af58fcce0fc7abfc475fe4b83d90438bf510952f632b4753ac92a3ae2d4d4786a8a517d466791ca294b197852b5f430496a1c600314db6a279b935c5a884f700c883f79f070d75489820a0f2c8a5c57eae332dad0d88d8141d2c644a8657368b0f5639d78ec8654e6f62c443fd59fd748c37cd29dd46bf8acf6fb6fda1db086503f2e4cea035070203ef6fb4e1567d76bf2752601840055fe7e0e7e324", 0xf7}, {&(0x7f0000000500)="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", 0x1000}], 0x3, &(0x7f0000001500)=[@iv={0xc8, 0x117, 0x2, 0xb2, "6c29c587fe4f23fe90a2d88bb2c543be1824336c55656c01aca88a2adedef0854bc7febae6fc0f223cd6f58497f40f8f00fd44ff967ab44435044f21e7d56771e388f553d9b6b2d8329b6254d0f2aa7b8c9f465876ab3e47bdfbaca25f972d54e5604d950b2bbfd9702505e99a1b83327d2b15fb173a6b5b02901a98633fd198f419d0a3b67ec355e2887ac0011ba0f0b1421ae6b280345dfef987fd16e96fa682d7e028ce4895a95c78d3f4dc18dd1c1743"}, @iv={0xf0, 0x117, 0x2, 0xd7, "ff9aa38ab99decccfb41df7ae04777942b2a49214a5e9a0667bce4ed266aefe61b25f4f70066d63db2b4f951461948d88d1bd27cfe53705fbddde6d3f8f38cac3b246ef9339da63f11d36010c52dc60fc2f798900234d88439f094d888bd1506d3dd8908d40557ed9e9a15f4fa05b513120223e34475463d3b666af1edea490ff403231b5be45e67bc0ef681d6a7f093f006b6b3f0c388b56a15a1fc6d9b720aa779b16d6c3d537ad29826088c88a0bcfc7767a46a1655c7f1c262a3c275213839b6c76dbc6d8b8cf24ca23da855a5fe414446eaeb501e"}, @assoc={0x18, 0x117, 0x4, 0x5af}], 0x1d0, 0x2000}, 0x40000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000200)={'stack ', '$)-\x00'}, 0xa) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000017c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1ff}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r3, 0x1, "a4b462", "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"}}, 0x110) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x22]}, 0x40) 07:25:02 executing program 5: bpf$MAP_CREATE(0xb0000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), 0x4) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:02 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10, 0x515401) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8007, 0x90002) accept$alg(0xffffffffffffffff, 0x0, 0x0) 07:25:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffbffe1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000000)) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xb54c0d092953d3d6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x23]}, 0x40) 07:25:02 executing program 5: bpf$MAP_CREATE(0x400000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x400, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 07:25:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = socket(0x5, 0xa, 0x0) bind$xdp(r1, &(0x7f0000000000), 0x10) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f0000000040)) 07:25:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:25:02 executing program 5: bpf$MAP_CREATE(0x80ffff, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:02 executing program 5: bpf$MAP_CREATE(0x1000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x400c3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x13c981) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)) 07:25:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0}}, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r3}, 0x8) ioctl$PPPIOCSCOMPRESS(r5, 0x4010744d) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x781}, 0x14}}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x26}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x6c}}, 0x40001) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x2]}, 0x40) 07:25:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r2}) 07:25:02 executing program 5: bpf$MAP_CREATE(0x2000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 4: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)) 07:25:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x131002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x8000, {0x5, 0xfff, "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", 0x92, 0x6, 0x0, 0x8, 0x49, 0x1, 0x80}}}, 0x128) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x100000000) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x902a8bf875050b99, 0x8}}, 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r2}) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x3]}, 0x40) 07:25:02 executing program 5: bpf$MAP_CREATE(0x3000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) 07:25:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x3, 0x5, 0xff, 0x4, 0x0, 0xffffffffffffffff, 0x1f, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x40) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x7800, 0x80, 0x200, 0x1000, {{0x21, 0x4, 0x1, 0x3, 0x84, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x18, 0xc0, 0x0, 0x5, [0x76b, 0x1, 0x4025, 0x1, 0x6]}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x7, [0x5, 0xf90, 0x0]}, @rr={0x7, 0xf, 0x3c, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @multicast2]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x46, [@rand_addr=0x64010102, @local, @multicast1, @broadcast]}, @rr={0x7, 0x1f, 0x51, [@rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @multicast1, @local, @remote]}]}}}}}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f0000000100)=@raw=[@map={0x18, 0x5, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffff7}], &(0x7f0000000140)='GPL\x00', 0x1f1c, 0x0, 0x0, 0x40f00, 0x8, [], r3, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xe, 0x0, 0x100}, 0x10, 0xffffffffffffffff}, 0x78) 07:25:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x4]}, 0x40) 07:25:02 executing program 3: r0 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="aa2ac0acdb9ae1892e1a5fbc6f862e019a06d767f0896eb2e9fa72e1929d1117def08ab5a158cfdfd16cf63de8d05d24560e56d1ee852f6ff29e77760afdb2c4645587d5b6ced103b12910d4bbe19a869d6edcc16e4ef60bba0ce6a0d5c5957177124ca29fdfa430b936442189e4c30ee872e19326da738f5a171687533c3a132596479687c65d9ebd7b2bd99fe8bd5d9774254368ae816f7a5a86009984ecfb5cd7d05a2c59fe9c10bd0eb1a40c21ac0b43322a1e8250c0fb0a27bfb01dff8c939df4aeaff7298d3464e5a9122569a69a21a5ceac9de03bdc6d500882d858325f0e035f441df30896cebdb0", 0x4a, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) r1 = request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='encrypted\x00', r0) request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000400)='\x04Cl\x80kb\xcbt\x98\xf8n\x1a\'\xba\xf6\x8a\xbf\xff\xf8\xc7\x85cfdx\xc1\xda(\xbd\xf5\xb6-\xdc\x9fdh\xc1nnrm\x9d\x19C\x9c\x89\xf4\xbfD\x8b\xe0\x90nwS<\f\x9f_\x91?\xca\x188\x9a\\I \x92*\x95b\xe6\x1c\xf1\xc5\x93\xe4K\x8a\xbbC\b\xc9>gr\x1c\r\xf1\x97@`\xd1\x99\xe4V\x9c\xa3\x18\xad\xc2\x99\n\xfb\xa4\xd8\xf6\x91OP\xd4i-\xf99\xab\xf3m\xafY\x830\n\xcbCp\x97^\xc8^Z\xb5zY\xd5\xd3\x9b\xb6\xe3\xd4V\x11\x11!\xa7\xd6I\xe7K\x88UK\n\xf9\x1azulI\xef\xed\xd4\xebs2\xaa(L\"\x1ay(\xa6\xa9A\x060;\xbe\xd5S\xc3e`\xb1\x1e\xc5s\xdb\xd8\xcb(W\x88k)\xe4\x96\xc9n\xc4\xc3o\xd7\xf4\xa1\x16{\x14\xfe\x1b', r1) add_key$fscrypt_v1(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'fscrypt:', @desc4='85baa174f0cb1142'}, &(0x7f0000000380)={0x0, "4f2052ae5cc9003e81a58229fd169b33492aabeda7041d2ef6ddf3bd97dc6f8ee33b71393646516155ecacd730227f217b9f75e3df7451e2dd3ae389388a8949", 0x3e}, 0x48, 0xfffffffffffffffa) 07:25:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) 07:25:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400d9, 0x4040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:02 executing program 5: bpf$MAP_CREATE(0x4000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='timers\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000080)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000100)) 07:25:02 executing program 3: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x2, 0xf0, 0x4}, 0xff, 0xff}], 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x6f353b75579adf7f) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x381) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x5]}, 0x40) 07:25:03 executing program 5: bpf$MAP_CREATE(0x5000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x8000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000080)={0xa, 0x4}, 0xc) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0xa102, 0x0) 07:25:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400d9, 0x4040) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 07:25:03 executing program 5: bpf$MAP_CREATE(0x6000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x6]}, 0x40) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:25:03 executing program 4: setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000080)=[{0x2, 0x3, {0x2, 0xf0, 0x2}, {0x2, 0xf0, 0x4}, 0xff, 0xff}], 0x20) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x6f353b75579adf7f) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x381) 07:25:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:03 executing program 5: bpf$MAP_CREATE(0x7000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x2a43c3) r0 = getpid() syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fdinfo/4\x00') r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r1, &(0x7f0000000080)='net/raw6\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='setgroups\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0x8913, 0x0) 07:25:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)) keyctl$update(0x2, 0x0, &(0x7f0000000100)="ec10cda9d1702b78f8d4d07dfc2956634730234cc1767e5d983c56c6519a25cdcef5383d9e2c20ca2af9b9019b887621b9129d6f5e7a2f36738057a3", 0x3c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000040)) r5 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r5, 0xd68, 0xfffffffffffffff9) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nf_conntrack\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x200, 0xe44, 0x1, 0x10, r6, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x40) 07:25:03 executing program 1: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) fstat(r0, &(0x7f0000000040)) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x7]}, 0x40) 07:25:03 executing program 5: bpf$MAP_CREATE(0x8000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2}) 07:25:03 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x24080, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x8]}, 0x40) 07:25:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r1, &(0x7f0000000080)=""/233, 0xe9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:03 executing program 5: bpf$MAP_CREATE(0x9000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x40, 0x8, 0x1ff, 0x347, {{0x9, 0x4, 0x3, 0x3, 0x24, 0x66, 0x0, 0x8a, 0x4, 0x0, @multicast1, @multicast2, {[@noop, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x3, [{@rand_addr=0x64010101, 0x20}]}, @noop]}}}}}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x8913, 0x0) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x200000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) 07:25:03 executing program 5: bpf$MAP_CREATE(0xa000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x9]}, 0x40) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r2}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0xfffffffffffffffe) 07:25:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r1, &(0x7f0000000080)=""/233, 0xe9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x100) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) 07:25:03 executing program 5: bpf$MAP_CREATE(0xb000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r1, &(0x7f0000000080)=""/233, 0xe9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0xc042, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xa]}, 0x40) 07:25:03 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r0, &(0x7f0000000080)=""/233, 0xe9) 07:25:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r1, 0x5) 07:25:03 executing program 5: bpf$MAP_CREATE(0xc000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xfff7fffffffffffd, 0x8841) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r1}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000200)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000280)={r2}) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) geteuid() io_uring_setup(0x639f, &(0x7f0000000100)={0x0, 0xf240, 0x1, 0x0, 0x3cc, 0x0, r5}) 07:25:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x204c0, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0xffffffffffffffd4, 0x6, 0x1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x40, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x4) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000040)={0x6ba802af, 0x80000000}) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xb]}, 0x40) 07:25:03 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:03 executing program 5: bpf$MAP_CREATE(0xd000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 0: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x0, 0xfa, 0x5, 0x7f}, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:25:03 executing program 3: ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000100)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x2000) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000240)=0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/key-users\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x80086301, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x400000, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000002c0)=0x10000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000200)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) keyctl$describe(0x6, 0x0, &(0x7f0000000140)=""/134, 0x86) 07:25:03 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1001, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x9, @mcast2, 0x9}}}, 0x30) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 07:25:03 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xc]}, 0x40) 07:25:03 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:03 executing program 5: bpf$MAP_CREATE(0xe000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb342, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1ff}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x8, 0x3, 0xa, 0xffffffffffffffb0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x20, 0x2, 0x7, 0xbe62, 0x1f}, @alu={0x7, 0x1, 0xb, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x7, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xd]}, 0x40) 07:25:04 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c03, 0x0) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:04 executing program 5: bpf$MAP_CREATE(0xf000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r0, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb342, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1ff}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x8, 0x3, 0xa, 0xffffffffffffffb0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x20, 0x2, 0x7, 0xbe62, 0x1f}, @alu={0x7, 0x1, 0xb, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x7, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x7fffffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r2) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xe]}, 0x40) 07:25:04 executing program 5: bpf$MAP_CREATE(0x10000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x80086301, 0x0) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb342, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1ff}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x8, 0x3, 0xa, 0xffffffffffffffb0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x20, 0x2, 0x7, 0xbe62, 0x1f}, @alu={0x7, 0x1, 0xb, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x7, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x204, 0x345101) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 07:25:04 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x80086301, 0x0) 07:25:04 executing program 5: bpf$MAP_CREATE(0x11000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x3ff, 0x0, 0x0, 0x200, 0xffffffffffffffff, 0x1, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x40) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0xf]}, 0x40) 07:25:04 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x13, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb342, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1ff}, @map={0x18, 0x7, 0x1, 0x0, r2}, @map={0x18, 0x2, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x8, 0x3, 0xa, 0xffffffffffffffb0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @generic={0x20, 0x2, 0x7, 0xbe62, 0x1f}, @alu={0x7, 0x1, 0xb, 0x7}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, [], 0x0, 0x1a, r1, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x7, 0x5}, 0x10, 0xffffffffffffffff}, 0x78) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0x80086301, 0x0) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x10]}, 0x40) 07:25:04 executing program 5: bpf$MAP_CREATE(0x12000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 4: r0 = syz_open_procfs(0x0, 0x0) read$alg(r0, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1fe9c06477a6170dcce287f1853c6491dba45272aa4e3c763d7ca130fbfbb9dfb6287a76c70801ac5ea840476fd4d7b86f154f3b3095585197a545c8d49fd0522b14af033e2cc08f98a987c4a3f3fb82ea8d61826caa8eba8e93c273acade0016e56e8e17ecbdb3ac98379f64529d1122eef4f314ea62059cf6784a569fa9f9faaee07a042480326be193661e747", 0x8e}, {&(0x7f0000000100)="18f3", 0x2}], 0x2, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x1208}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:04 executing program 5: bpf$MAP_CREATE(0x13000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x11]}, 0x40) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000480), r1, 0x1}}, 0x18) 07:25:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, r1, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000004, 0x143002) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000140)={r2}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4b8, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x82880) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x80086301, 0x0) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x12]}, 0x40) 07:25:04 executing program 5: bpf$MAP_CREATE(0x14000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:25:04 executing program 5: bpf$MAP_CREATE(0x15000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x165951ec5142c45f}) 07:25:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x13]}, 0x40) 07:25:04 executing program 5: bpf$MAP_CREATE(0x16000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x165951ec5142c45f}) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000600)={0x15, 0x110, 0xfa00, {r4, 0x401, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0x0, {"1f660299e45e5cea2ae57c91546b18ad"}, 0x3ff, 0x4, 0xffffffff}, @ib={0x1b, 0x7ff, 0x5, {"ef8ee0d59368dbe529188ccc3327c834"}, 0x1, 0x4, 0x4}}}, 0x118) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x14]}, 0x40) 07:25:04 executing program 4: syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(0xffffffffffffffff, &(0x7f0000000080)=""/233, 0xe9) 07:25:04 executing program 5: bpf$MAP_CREATE(0x17000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x165951ec5142c45f}) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000580), 0x13f, 0x8}}, 0x20) 07:25:04 executing program 5: bpf$MAP_CREATE(0x18000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x15]}, 0x40) 07:25:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r0, 0x0, 0x0) 07:25:04 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x7f}}, 0x18) 07:25:05 executing program 5: bpf$MAP_CREATE(0x19000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x16]}, 0x40) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r0, 0x0, 0x0) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r3}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x8000, 0x2, "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", 0x6, 0x5, 0x5, 0xff, 0x0, 0x70, 0x4}, r1}}, 0x120) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1a000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x17]}, 0x40) 07:25:05 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x3}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') read$alg(r0, 0x0, 0x0) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x18]}, 0x40) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1b000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x3}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:05 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r1, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x830) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x19]}, 0x40) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1c000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x3}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x1a]}, 0x40) 07:25:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r1, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x830) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:05 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x3}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1d000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x1b]}, 0x40) 07:25:05 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r1, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f00000000c0)=0x830) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1e000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x3, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x1c]}, 0x40) 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:05 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r0, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f00000000c0)=0x830) 07:25:05 executing program 5: bpf$MAP_CREATE(0x1f000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x8, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x1d]}, 0x40) 07:25:05 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r0}}, 0x30) 07:25:05 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 5: bpf$MAP_CREATE(0x20000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0xee, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r0, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) 07:25:05 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r0}}, 0x30) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x1e]}, 0x40) 07:25:05 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r0, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') 07:25:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:05 executing program 5: bpf$MAP_CREATE(0x21000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r0}}, 0x30) 07:25:05 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x21]}, 0x40) 07:25:05 executing program 5: bpf$MAP_CREATE(0x22000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:05 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)) write$qrtrtun(r0, &(0x7f0000000140)="dc4244e43c25187a476e50750cc5acd49ac0a83241f837332937cbdd3c23ffc3d39b1f186440948aa2843f6d2ad623d56c7607a13f5ecd028f060a63f663735cd0fc7e3706699f7d217536bb14968566d123b9cf71619092c8bf4ace3d1950f7a974c1a19c3ca1a96a7e47e45a93d6fe0c2b8b5112b0f980bcc1039aa98a7706f82f1ceb5a1c5f9ab600e45d100bf56ceaff24aac68523fd433663817cd62dd85099cc", 0xa3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x22]}, 0x40) 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 07:25:06 executing program 5: bpf$MAP_CREATE(0x23000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x23]}, 0x40) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 5: bpf$MAP_CREATE(0x4e000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 07:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 5: bpf$MAP_CREATE(0x52000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x2]}, 0x40) 07:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x100, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 5: bpf$MAP_CREATE(0x53000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x3]}, 0x40) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x100}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x4]}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:06 executing program 5: bpf$MAP_CREATE(0x54000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000040)={0x3}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 3: ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x5]}, 0x40) 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:06 executing program 5: bpf$MAP_CREATE(0x55000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xe4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 07:25:06 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x6]}, 0x40) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:06 executing program 5: bpf$MAP_CREATE(0x56000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x7]}, 0x40) 07:25:06 executing program 5: bpf$MAP_CREATE(0x57000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2639.550758][ T6112] FAULT_INJECTION: forcing a failure. [ 2639.550758][ T6112] name failslab, interval 1, probability 0, space 0, times 0 [ 2639.597890][ T6112] CPU: 0 PID: 6112 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2639.608006][ T6112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2639.618348][ T6112] Call Trace: [ 2639.621634][ T6112] dump_stack+0x137/0x19d [ 2639.626009][ T6112] should_fail+0x23c/0x250 [ 2639.630435][ T6112] __should_failslab+0x81/0x90 [ 2639.635242][ T6112] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2639.640971][ T6112] should_failslab+0x5/0x20 07:25:06 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:06 executing program 5: bpf$MAP_CREATE(0x58000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2639.645653][ T6112] __kmalloc+0x66/0x380 [ 2639.649819][ T6112] ? path_openat+0x191f/0x21b0 [ 2639.654714][ T6112] ? __rcu_read_unlock+0x5c/0x250 [ 2639.659755][ T6112] tomoyo_realpath_from_path+0x98/0x3b0 [ 2639.665387][ T6112] tomoyo_path_number_perm+0xc1/0x2d0 [ 2639.670810][ T6112] ? __rcu_read_unlock+0x5c/0x250 [ 2639.675865][ T6112] tomoyo_file_ioctl+0x1c/0x20 [ 2639.680661][ T6112] security_file_ioctl+0x45/0x90 [ 2639.685611][ T6112] __se_sys_ioctl+0x48/0x140 [ 2639.690207][ T6112] __x64_sys_ioctl+0x3f/0x50 07:25:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) [ 2639.694865][ T6112] do_syscall_64+0x39/0x80 [ 2639.699287][ T6112] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2639.705229][ T6112] RIP: 0033:0x465f69 [ 2639.709270][ T6112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2639.729850][ T6112] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2639.738315][ T6112] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 07:25:07 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) [ 2639.746356][ T6112] RDX: 0000000020000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 2639.754339][ T6112] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2639.762315][ T6112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2639.770323][ T6112] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2639.778798][ C0] ------------[ cut here ]------------ [ 2639.784252][ C0] WARNING: CPU: 0 PID: 6112 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2639.795032][ C0] Modules linked in: 07:25:07 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) [ 2639.798931][ C0] CPU: 0 PID: 6112 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2639.809022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2639.819088][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2639.825263][ C0] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 07:25:07 executing program 5: bpf$MAP_CREATE(0x58030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2639.845123][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 2639.851200][ C0] RAX: ffffffff82eb2979 RBX: 000000000000000b RCX: ffff88809a78d000 [ 2639.859180][ C0] RDX: 0000000000010001 RSI: 000000000000000b RDI: 0000000000000001 [ 2639.867177][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2639.875198][ C0] R10: 0001ffffffffffff R11: 00000000fffffffe R12: ffff88813bc1da58 [ 2639.883567][ C0] R13: ffff88813bc1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2639.891549][ C0] FS: 00007ff3f0e88700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 2639.900491][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2639.907103][ C0] CR2: 0000001b30521000 CR3: 000000009ac6a000 CR4: 00000000001506f0 [ 2639.915124][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2639.923107][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2639.931186][ C0] Call Trace: [ 2639.934476][ C0] [ 2639.937330][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2639.943169][ C0] __run_hrtimer+0x163/0x460 [ 2639.947760][ C0] hrtimer_interrupt+0x380/0xaf0 [ 2639.952701][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2639.958887][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 2639.964608][ C0] [ 2639.967521][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2639.973510][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2639.979312][ C0] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2639.999926][ C0] RSP: 0018:ffffc900150f3ab8 EFLAGS: 00000202 [ 2640.006092][ C0] RAX: 0000000000000000 RBX: ffff88809a78d000 RCX: ffffffff85a00e37 [ 2640.014067][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2640.022200][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2640.030330][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2640.039675][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.047633][ C0] ? native_iret+0x7/0x7 [ 2640.051907][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 2640.057448][ C0] irqentry_exit+0x2a/0x40 [ 2640.061862][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2640.067320][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 2640.072463][ C0] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2640.092053][ C0] RSP: 0018:ffffc900150f3b90 EFLAGS: 00000287 [ 2640.098105][ C0] RAX: 2e1f35b076c83f00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2640.106100][ C0] RDX: ffffc90000e79000 RSI: 00000000000181ab RDI: 00000000000181ac [ 2640.114112][ C0] RBP: 0000000000000000 R08: ffffffff82a5fc61 R09: 000188809a78d3cf [ 2640.122085][ C0] R10: 0001ffffffffffff R11: ffff88809a78d000 R12: ffffffff8779aee8 [ 2640.130064][ C0] R13: 0000000000000001 R14: ffffffff8779af00 R15: 0000000000000200 [ 2640.138059][ C0] ? dump_stack+0x15e/0x19d [ 2640.142555][ C0] should_fail+0x23c/0x250 [ 2640.146987][ C0] __should_failslab+0x81/0x90 [ 2640.151763][ C0] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2640.157471][ C0] should_failslab+0x5/0x20 [ 2640.162063][ C0] __kmalloc+0x66/0x380 [ 2640.166200][ C0] ? path_openat+0x191f/0x21b0 [ 2640.171023][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2640.176032][ C0] tomoyo_realpath_from_path+0x98/0x3b0 [ 2640.181596][ C0] tomoyo_path_number_perm+0xc1/0x2d0 [ 2640.186970][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2640.192003][ C0] tomoyo_file_ioctl+0x1c/0x20 [ 2640.196786][ C0] security_file_ioctl+0x45/0x90 [ 2640.201731][ C0] __se_sys_ioctl+0x48/0x140 [ 2640.206426][ C0] __x64_sys_ioctl+0x3f/0x50 [ 2640.211001][ C0] do_syscall_64+0x39/0x80 [ 2640.215406][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2640.221288][ C0] RIP: 0033:0x465f69 [ 2640.225164][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.244789][ C0] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2640.253208][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2640.261191][ C0] RDX: 0000000020000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 2640.269163][ C0] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.277149][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2640.285140][ C0] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2640.293124][ C0] ---[ end trace 3a4894fd838675aa ]--- [ 2640.298894][ C0] ------------[ cut here ]------------ [ 2640.304356][ C0] WARNING: CPU: 0 PID: 6112 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2640.315125][ C0] Modules linked in: [ 2640.319010][ C0] CPU: 0 PID: 6112 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2640.329054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.339106][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2640.345095][ C0] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2640.365161][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 2640.371246][ C0] RAX: ffffffff82eb2979 RBX: 000000000000001f RCX: ffff88809a78d000 [ 2640.379207][ C0] RDX: 0000000000010001 RSI: 000000000000001f RDI: 0000000000000001 [ 2640.387182][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2640.395136][ C0] R10: 0001ffffffffffff R11: 000000000000012e R12: ffff88813bc1da58 [ 2640.403252][ C0] R13: ffff88813bc1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2640.411409][ C0] FS: 00007ff3f0e88700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 2640.420462][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2640.427030][ C0] CR2: 0000001b30521000 CR3: 000000009ac6a000 CR4: 00000000001506f0 [ 2640.434991][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2640.442989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2640.451157][ C0] Call Trace: [ 2640.454430][ C0] [ 2640.457263][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2640.463093][ C0] __run_hrtimer+0x163/0x460 [ 2640.467761][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 2640.473773][ C0] hrtimer_interrupt+0x380/0xaf0 [ 2640.478761][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2640.484904][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 2640.490545][ C0] [ 2640.493485][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2640.499490][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2640.505288][ C0] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2640.525028][ C0] RSP: 0018:ffffc900150f3ab8 EFLAGS: 00000202 [ 2640.531081][ C0] RAX: 0000000000000000 RBX: ffff88809a78d000 RCX: ffffffff85a00e37 [ 2640.539053][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2640.547010][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2640.555053][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2640.563009][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2640.570989][ C0] ? native_iret+0x7/0x7 [ 2640.575257][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 2640.581200][ C0] irqentry_exit+0x2a/0x40 [ 2640.585740][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2640.591202][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 2640.596401][ C0] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2640.616011][ C0] RSP: 0018:ffffc900150f3b90 EFLAGS: 00000287 [ 2640.622116][ C0] RAX: 2e1f35b076c83f00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2640.630965][ C0] RDX: ffffc90000e79000 RSI: 00000000000181ab RDI: 00000000000181ac [ 2640.639031][ C0] RBP: 0000000000000000 R08: ffffffff82a5fc61 R09: 000188809a78d3cf [ 2640.647003][ C0] R10: 0001ffffffffffff R11: ffff88809a78d000 R12: ffffffff8779aee8 [ 2640.655079][ C0] R13: 0000000000000001 R14: ffffffff8779af00 R15: 0000000000000200 [ 2640.663034][ C0] ? dump_stack+0x15e/0x19d [ 2640.667539][ C0] should_fail+0x23c/0x250 [ 2640.671949][ C0] __should_failslab+0x81/0x90 [ 2640.676738][ C0] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2640.682473][ C0] should_failslab+0x5/0x20 [ 2640.686971][ C0] __kmalloc+0x66/0x380 [ 2640.691211][ C0] ? path_openat+0x191f/0x21b0 [ 2640.695974][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2640.701011][ C0] tomoyo_realpath_from_path+0x98/0x3b0 [ 2640.706737][ C0] tomoyo_path_number_perm+0xc1/0x2d0 [ 2640.712365][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2640.717379][ C0] tomoyo_file_ioctl+0x1c/0x20 [ 2640.722167][ C0] security_file_ioctl+0x45/0x90 [ 2640.727613][ C0] __se_sys_ioctl+0x48/0x140 [ 2640.732249][ C0] __x64_sys_ioctl+0x3f/0x50 [ 2640.736838][ C0] do_syscall_64+0x39/0x80 [ 2640.741253][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2640.747262][ C0] RIP: 0033:0x465f69 [ 2640.751154][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2640.770766][ C0] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2640.779446][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2640.787703][ C0] RDX: 0000000020000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 2640.795658][ C0] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2640.804584][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2640.812590][ C0] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2640.820580][ C0] ---[ end trace 3a4894fd838675ab ]--- [ 2640.826366][ C0] ------------[ cut here ]------------ [ 2640.831827][ C0] WARNING: CPU: 0 PID: 6112 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2640.843141][ C0] Modules linked in: [ 2640.847034][ C0] CPU: 0 PID: 6112 Comm: syz-executor.0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2640.857111][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2640.867212][ C0] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2640.873305][ C0] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2640.892980][ C0] RSP: 0018:ffffc90000003e18 EFLAGS: 00010046 [ 2640.899032][ C0] RAX: ffffffff82eb2979 RBX: 0000000000000020 RCX: ffff88809a78d000 [ 2640.907004][ C0] RDX: 0000000000010001 RSI: 0000000000000020 RDI: 0000000000000001 [ 2640.914969][ C0] RBP: ffff88813bc1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2640.922993][ C0] R10: 0001ffffffffffff R11: ffff88809a78d000 R12: ffff88813bc1da58 [ 2640.930948][ C0] R13: ffff88813bc1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2640.938994][ C0] FS: 00007ff3f0e88700(0000) GS:ffff88813bc00000(0000) knlGS:0000000000000000 [ 2640.948004][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2640.954577][ C0] CR2: 0000001b30521000 CR3: 000000009ac6a000 CR4: 00000000001506f0 [ 2640.962527][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2640.970822][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2640.978775][ C0] Call Trace: [ 2640.982058][ C0] [ 2640.984899][ C0] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2640.990694][ C0] __run_hrtimer+0x163/0x460 [ 2640.995275][ C0] ? clockevents_program_event+0x19c/0x1e0 [ 2641.001080][ C0] hrtimer_interrupt+0x380/0xaf0 [ 2641.006042][ C0] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2641.011943][ C0] sysvec_apic_timer_interrupt+0x69/0x80 [ 2641.017579][ C0] [ 2641.020517][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2641.026482][ C0] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2641.032457][ C0] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2641.052061][ C0] RSP: 0018:ffffc900150f3ab8 EFLAGS: 00000202 [ 2641.058111][ C0] RAX: 0000000000000000 RBX: ffff88809a78d000 RCX: ffffffff85a00e37 [ 2641.066081][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2641.074055][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2641.082016][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2641.089985][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2641.097937][ C0] ? native_iret+0x7/0x7 [ 2641.102184][ C0] irqentry_exit_cond_resched+0x30/0x40 [ 2641.107730][ C0] irqentry_exit+0x2a/0x40 [ 2641.112128][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2641.117601][ C0] RIP: 0010:dump_stack+0x17d/0x19d [ 2641.122711][ C0] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2641.142321][ C0] RSP: 0018:ffffc900150f3b90 EFLAGS: 00000287 [ 2641.148525][ C0] RAX: 2e1f35b076c83f00 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2641.156491][ C0] RDX: ffffc90000e79000 RSI: 00000000000181ab RDI: 00000000000181ac [ 2641.164457][ C0] RBP: 0000000000000000 R08: ffffffff82a5fc61 R09: 000188809a78d3cf [ 2641.172436][ C0] R10: 0001ffffffffffff R11: ffff88809a78d000 R12: ffffffff8779aee8 [ 2641.180395][ C0] R13: 0000000000000001 R14: ffffffff8779af00 R15: 0000000000000200 [ 2641.188351][ C0] ? dump_stack+0x15e/0x19d [ 2641.192880][ C0] should_fail+0x23c/0x250 [ 2641.197427][ C0] __should_failslab+0x81/0x90 [ 2641.202394][ C0] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2641.208566][ C0] should_failslab+0x5/0x20 [ 2641.213080][ C0] __kmalloc+0x66/0x380 [ 2641.217220][ C0] ? path_openat+0x191f/0x21b0 [ 2641.221987][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2641.227018][ C0] tomoyo_realpath_from_path+0x98/0x3b0 [ 2641.232548][ C0] tomoyo_path_number_perm+0xc1/0x2d0 [ 2641.237905][ C0] ? __rcu_read_unlock+0x5c/0x250 [ 2641.243020][ C0] tomoyo_file_ioctl+0x1c/0x20 [ 2641.248036][ C0] security_file_ioctl+0x45/0x90 [ 2641.253026][ C0] __se_sys_ioctl+0x48/0x140 [ 2641.257602][ C0] __x64_sys_ioctl+0x3f/0x50 [ 2641.262182][ C0] do_syscall_64+0x39/0x80 [ 2641.266611][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2641.272499][ C0] RIP: 0033:0x465f69 [ 2641.276372][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2641.295998][ C0] RSP: 002b:00007ff3f0e88188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2641.304414][ C0] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2641.312391][ C0] RDX: 0000000020000080 RSI: 00000000c00c642d RDI: 0000000000000003 [ 2641.320378][ C0] RBP: 00007ff3f0e881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2641.328665][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2641.336645][ C0] R13: 00007fff4e35062f R14: 00007ff3f0e88300 R15: 0000000000022000 [ 2641.344622][ C0] ---[ end trace 3a4894fd838675ac ]--- [ 2641.350074][ C0] hrtimer: interrupt took 1571604430 ns [ 2641.358518][ T6112] ERROR: Out of memory at tomoyo_realpath_from_path. 07:25:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x8]}, 0x40) 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:08 executing program 4: syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:08 executing program 3: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) 07:25:08 executing program 5: bpf$MAP_CREATE(0x59000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x2, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:08 executing program 5: bpf$MAP_CREATE(0x70030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}}}, 0x30) 07:25:08 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x9]}, 0x40) 07:25:08 executing program 4: syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:08 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x10, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:08 executing program 5: bpf$MAP_CREATE(0x78010000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:08 executing program 4: syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:08 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x0, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:09 executing program 5: bpf$MAP_CREATE(0x7f000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xa]}, 0x40) 07:25:09 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xb]}, 0x40) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x1261, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:09 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:09 executing program 5: bpf$MAP_CREATE(0x7f010000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:09 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xc]}, 0x40) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:09 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x1269, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 3: syz_open_dev$dri(0x0, 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 07:25:09 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, 0x0) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 07:25:09 executing program 5: bpf$MAP_CREATE(0x7f020000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2642.171208][ T6278] FAULT_INJECTION: forcing a failure. [ 2642.171208][ T6278] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.184140][ T6278] CPU: 0 PID: 6278 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2642.194221][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2642.204324][ T6278] Call Trace: [ 2642.207610][ T6278] dump_stack+0x137/0x19d [ 2642.211963][ T6278] should_fail+0x23c/0x250 [ 2642.216405][ T6278] __should_failslab+0x81/0x90 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xd]}, 0x40) [ 2642.221313][ T6278] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2642.227220][ T6278] should_failslab+0x5/0x20 [ 2642.231735][ T6278] __kmalloc+0x66/0x380 [ 2642.236003][ T6278] ? path_openat+0x191f/0x21b0 [ 2642.240914][ T6278] ? __rcu_read_unlock+0x5c/0x250 [ 2642.245950][ T6278] tomoyo_realpath_from_path+0x98/0x3b0 [ 2642.251747][ T6278] tomoyo_path_number_perm+0xc1/0x2d0 [ 2642.257137][ T6278] ? __rcu_read_unlock+0x5c/0x250 [ 2642.262237][ T6278] tomoyo_file_ioctl+0x1c/0x20 [ 2642.267155][ T6278] security_file_ioctl+0x45/0x90 [ 2642.272159][ T6278] __se_sys_ioctl+0x48/0x140 [ 2642.276762][ T6278] __x64_sys_ioctl+0x3f/0x50 [ 2642.281410][ T6278] do_syscall_64+0x39/0x80 [ 2642.285851][ T6278] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2642.291835][ T6278] RIP: 0033:0x465f69 [ 2642.295819][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x4c01, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 5: bpf$MAP_CREATE(0x7f030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, 0x0) [ 2642.315437][ T6278] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2642.323885][ T6278] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2642.331902][ T6278] RDX: 0000000000000000 RSI: 0000000000004c02 RDI: 0000000000000003 [ 2642.340016][ T6278] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.348094][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.356074][ T6278] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 07:25:09 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, 0x0) 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x541b, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 5: bpf$MAP_CREATE(0x80010000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2642.377758][ T6278] ERROR: Out of memory at tomoyo_realpath_from_path. 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 07:25:09 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:09 executing program 4 (fault-call:1 fault-nth:0): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:09 executing program 5: bpf$MAP_CREATE(0x80020000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xe]}, 0x40) 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x5421, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x5450, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x5, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) [ 2642.571133][ T6330] FAULT_INJECTION: forcing a failure. [ 2642.571133][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 2642.602692][ T6333] FAULT_INJECTION: forcing a failure. [ 2642.602692][ T6333] name failslab, interval 1, probability 0, space 0, times 0 07:25:09 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0xf]}, 0x40) [ 2642.616226][ T6333] CPU: 0 PID: 6333 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2642.626307][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2642.636388][ T6333] Call Trace: [ 2642.639706][ T6333] dump_stack+0x137/0x19d [ 2642.644228][ T6333] should_fail+0x23c/0x250 [ 2642.648644][ T6333] __should_failslab+0x81/0x90 [ 2642.653436][ T6333] ? tomoyo_encode2+0x1d3/0x350 [ 2642.658347][ T6333] should_failslab+0x5/0x20 [ 2642.662870][ T6333] __kmalloc+0x66/0x380 07:25:09 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) [ 2642.667036][ T6333] tomoyo_encode2+0x1d3/0x350 [ 2642.671990][ T6333] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2642.677632][ T6333] tomoyo_path_number_perm+0xc1/0x2d0 [ 2642.683015][ T6333] ? __rcu_read_unlock+0x5c/0x250 [ 2642.688133][ T6333] tomoyo_file_ioctl+0x1c/0x20 [ 2642.692950][ T6333] security_file_ioctl+0x45/0x90 [ 2642.697917][ T6333] __se_sys_ioctl+0x48/0x140 [ 2642.702509][ T6333] __x64_sys_ioctl+0x3f/0x50 [ 2642.707117][ T6333] do_syscall_64+0x39/0x80 [ 2642.711539][ T6333] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2642.717436][ T6333] RIP: 0033:0x465f69 [ 2642.721324][ T6333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2642.741514][ T6333] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2642.749961][ T6333] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2642.758069][ T6333] RDX: 0000000000000000 RSI: 0000000000004c02 RDI: 0000000000000003 [ 2642.766101][ T6333] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2642.774072][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2642.782046][ T6333] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2642.790066][ T6330] CPU: 1 PID: 6330 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2642.800151][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2642.802717][ T6333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2642.810433][ T6330] Call Trace: 07:25:10 executing program 5: bpf$MAP_CREATE(0x80030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x5451, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2642.810447][ T6330] dump_stack+0x137/0x19d [ 2642.824722][ T6330] should_fail+0x23c/0x250 [ 2642.829137][ T6330] ? getname_flags+0x84/0x3d0 [ 2642.833936][ T6330] __should_failslab+0x81/0x90 [ 2642.838752][ T6330] should_failslab+0x5/0x20 [ 2642.843358][ T6330] kmem_cache_alloc+0x46/0x320 [ 2642.848131][ T6330] getname_flags+0x84/0x3d0 [ 2642.852666][ T6330] getname+0x15/0x20 [ 2642.856599][ T6330] do_sys_openat2+0x5b/0x250 [ 2642.861331][ T6330] __x64_sys_openat+0xef/0x110 [ 2642.866100][ T6330] do_syscall_64+0x39/0x80 [ 2642.870502][ T6330] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2642.876534][ T6330] RIP: 0033:0x419554 [ 2642.880415][ T6330] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2642.900217][ T6330] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2642.909539][ T6330] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 07:25:10 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:10 executing program 4 (fault-call:1 fault-nth:1): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2642.917631][ T6330] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2642.925607][ T6330] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2642.933699][ T6330] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2642.942032][ T6330] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2643.004070][ T6358] FAULT_INJECTION: forcing a failure. [ 2643.004070][ T6358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2643.031116][ T6358] CPU: 0 PID: 6358 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2643.041257][ T6358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2643.052524][ T6358] Call Trace: [ 2643.055822][ T6358] dump_stack+0x137/0x19d [ 2643.060186][ T6358] should_fail+0x23c/0x250 [ 2643.064607][ T6358] should_fail_usercopy+0x16/0x20 [ 2643.069683][ T6358] strncpy_from_user+0x21/0x250 [ 2643.074647][ T6358] getname_flags+0xb8/0x3d0 [ 2643.079169][ T6358] getname+0x15/0x20 [ 2643.083194][ T6358] do_sys_openat2+0x5b/0x250 [ 2643.087801][ T6358] __x64_sys_openat+0xef/0x110 [ 2643.092631][ T6358] do_syscall_64+0x39/0x80 [ 2643.097089][ T6358] entry_SYSCALL_64_after_hwframe+0x44/0xae 07:25:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x5452, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:10 executing program 5: bpf$MAP_CREATE(0x80080000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x10]}, 0x40) [ 2643.103083][ T6358] RIP: 0033:0x419554 [ 2643.107035][ T6358] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2643.126722][ T6358] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2643.135252][ T6358] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2643.143253][ T6358] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c 07:25:10 executing program 5: bpf$MAP_CREATE(0x80090000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x11]}, 0x40) 07:25:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) 07:25:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x5460, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2643.149678][ T6355] FAULT_INJECTION: forcing a failure. [ 2643.149678][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2643.151456][ T6358] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2643.151474][ T6358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2643.151487][ T6358] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2643.251942][ T6355] CPU: 1 PID: 6355 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2643.262055][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2643.272122][ T6355] Call Trace: [ 2643.275408][ T6355] dump_stack+0x137/0x19d [ 2643.279780][ T6355] should_fail+0x23c/0x250 [ 2643.284202][ T6355] ? tsan.module_ctor+0x10/0x10 [ 2643.289059][ T6355] should_fail_usercopy+0x16/0x20 [ 2643.294127][ T6355] _copy_from_user+0x1c/0xd0 [ 2643.298723][ T6355] ? tsan.module_ctor+0x10/0x10 [ 2643.303656][ T6355] drm_ioctl+0x373/0x5e0 [ 2643.307926][ T6355] ? tsan.module_ctor+0x10/0x10 [ 2643.312786][ T6355] ? do_vfs_ioctl+0x4f7/0xec0 [ 2643.317528][ T6355] ? tomoyo_file_ioctl+0x1c/0x20 [ 2643.322481][ T6355] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2643.327522][ T6355] __se_sys_ioctl+0xcb/0x140 [ 2643.329698][ T6393] FAULT_INJECTION: forcing a failure. [ 2643.329698][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.332170][ T6355] __x64_sys_ioctl+0x3f/0x50 [ 2643.332197][ T6355] do_syscall_64+0x39/0x80 [ 2643.353775][ T6355] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2643.359707][ T6355] RIP: 0033:0x465f69 [ 2643.363608][ T6355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.383224][ T6355] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2643.391723][ T6355] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 07:25:10 executing program 5: bpf$MAP_CREATE(0x800a0000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:10 executing program 4 (fault-call:1 fault-nth:2): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2643.399727][ T6355] RDX: 0000000000000000 RSI: 0000000000004c02 RDI: 0000000000000003 [ 2643.407862][ T6355] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.415839][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2643.423830][ T6355] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2643.431814][ T6393] CPU: 0 PID: 6393 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2643.441923][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 07:25:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x12]}, 0x40) [ 2643.451974][ T6393] Call Trace: [ 2643.455363][ T6393] dump_stack+0x137/0x19d [ 2643.459726][ T6393] should_fail+0x23c/0x250 [ 2643.464297][ T6393] ? __alloc_file+0x2e/0x1a0 [ 2643.468977][ T6393] __should_failslab+0x81/0x90 [ 2643.473852][ T6393] should_failslab+0x5/0x20 [ 2643.478374][ T6393] kmem_cache_alloc+0x46/0x320 [ 2643.483163][ T6393] __alloc_file+0x2e/0x1a0 [ 2643.487605][ T6393] alloc_empty_file+0xcd/0x1c0 [ 2643.492435][ T6393] path_openat+0x65/0x21b0 [ 2643.497001][ T6393] ? __rcu_read_unlock+0x5c/0x250 [ 2643.502084][ T6393] ? aa_file_perm+0x125/0xe60 [ 2643.506915][ T6393] ? kstrtoull+0x30e/0x350 [ 2643.511417][ T6393] do_filp_open+0xbd/0x1d0 [ 2643.515812][ T6393] ? expand_files+0x55/0x520 [ 2643.520381][ T6393] ? __virt_addr_valid+0x15a/0x1a0 [ 2643.525624][ T6393] ? __check_object_size+0x253/0x310 [ 2643.531000][ T6393] ? _raw_spin_unlock+0x22/0x40 [ 2643.536041][ T6393] ? alloc_fd+0x35d/0x3b0 [ 2643.540374][ T6393] do_sys_openat2+0xa3/0x250 [ 2643.545073][ T6393] __x64_sys_openat+0xef/0x110 [ 2643.549854][ T6393] do_syscall_64+0x39/0x80 [ 2643.554265][ T6393] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2643.560156][ T6393] RIP: 0033:0x419554 [ 2643.564040][ T6393] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2643.583744][ T6393] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2643.592182][ T6393] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 07:25:10 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x6364, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x13]}, 0x40) 07:25:10 executing program 5: bpf$MAP_CREATE(0x800b0000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:10 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x80000001}, r1}}, 0x30) [ 2643.600153][ T6393] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2643.609297][ T6393] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2643.617432][ T6393] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2643.625560][ T6393] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:10 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x14]}, 0x40) 07:25:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x8913, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:11 executing program 5: bpf$MAP_CREATE(0x8c020000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2643.709642][ T6417] FAULT_INJECTION: forcing a failure. [ 2643.709642][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 2643.759380][ T6417] CPU: 0 PID: 6417 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2643.769541][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2643.779607][ T6417] Call Trace: [ 2643.782901][ T6417] dump_stack+0x137/0x19d [ 2643.787298][ T6417] should_fail+0x23c/0x250 [ 2643.791745][ T6417] ? radix_tree_node_alloc+0x9c/0x1f0 [ 2643.797170][ T6417] __should_failslab+0x81/0x90 [ 2643.802157][ T6417] should_failslab+0x5/0x20 07:25:11 executing program 5: bpf$MAP_CREATE(0xc9030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x15]}, 0x40) [ 2643.806713][ T6417] kmem_cache_alloc+0x46/0x320 [ 2643.811499][ T6417] radix_tree_node_alloc+0x9c/0x1f0 [ 2643.816819][ T6417] idr_get_free+0x22a/0x5d0 [ 2643.821399][ T6417] idr_alloc+0xce/0x190 [ 2643.825600][ T6417] ? tomoyo_path_number_perm+0x286/0x2d0 [ 2643.831502][ T6417] drm_getmagic+0x73/0x100 [ 2643.836281][ T6417] drm_ioctl_kernel+0x22a/0x2b0 [ 2643.841160][ T6417] ? tsan.module_ctor+0x10/0x10 [ 2643.846024][ T6417] drm_ioctl+0x406/0x5e0 [ 2643.850283][ T6417] ? tsan.module_ctor+0x10/0x10 [ 2643.855140][ T6417] ? do_vfs_ioctl+0x4f7/0xec0 [ 2643.859822][ T6417] ? tomoyo_file_ioctl+0x1c/0x20 [ 2643.864777][ T6417] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2643.869810][ T6417] __se_sys_ioctl+0xcb/0x140 [ 2643.874416][ T6417] __x64_sys_ioctl+0x3f/0x50 [ 2643.879072][ T6417] do_syscall_64+0x39/0x80 [ 2643.883493][ T6417] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2643.889444][ T6417] RIP: 0033:0x465f69 [ 2643.893336][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2643.913181][ T6417] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2643.921599][ T6417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2643.929627][ T6417] RDX: 0000000000000000 RSI: 0000000000004c02 RDI: 0000000000000003 [ 2643.937612][ T6417] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2643.945685][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 07:25:11 executing program 4 (fault-call:1 fault-nth:3): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x16]}, 0x40) [ 2643.953684][ T6417] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 07:25:11 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:11 executing program 5: bpf$MAP_CREATE(0xd9020000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x8914, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x17]}, 0x40) 07:25:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) 07:25:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x8933, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2644.048168][ T6446] FAULT_INJECTION: forcing a failure. [ 2644.048168][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.081427][ T6454] FAULT_INJECTION: forcing a failure. [ 2644.081427][ T6454] name fail_usercopy, interval 1, probability 0, space 0, times 0 07:25:11 executing program 5: bpf$MAP_CREATE(0xe6030000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2644.117102][ T6446] CPU: 0 PID: 6446 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2644.127331][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.137390][ T6446] Call Trace: [ 2644.140857][ T6446] dump_stack+0x137/0x19d [ 2644.145191][ T6446] should_fail+0x23c/0x250 [ 2644.149615][ T6446] ? security_file_alloc+0x30/0x190 [ 2644.154943][ T6446] __should_failslab+0x81/0x90 [ 2644.159708][ T6446] should_failslab+0x5/0x20 07:25:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x18]}, 0x40) [ 2644.164290][ T6446] kmem_cache_alloc+0x46/0x320 [ 2644.169066][ T6446] ? __alloc_file+0x2e/0x1a0 [ 2644.173672][ T6446] security_file_alloc+0x30/0x190 [ 2644.178704][ T6446] __alloc_file+0x83/0x1a0 [ 2644.183131][ T6446] alloc_empty_file+0xcd/0x1c0 [ 2644.187905][ T6446] path_openat+0x65/0x21b0 [ 2644.192341][ T6446] ? __rcu_read_unlock+0x5c/0x250 [ 2644.197399][ T6446] ? aa_file_perm+0x125/0xe60 [ 2644.202173][ T6446] ? kstrtoull+0x30e/0x350 [ 2644.206732][ T6446] do_filp_open+0xbd/0x1d0 [ 2644.211164][ T6446] ? expand_files+0x55/0x520 [ 2644.215767][ T6446] ? __virt_addr_valid+0x15a/0x1a0 [ 2644.220899][ T6446] ? __check_object_size+0x253/0x310 [ 2644.226219][ T6446] ? _raw_spin_unlock+0x22/0x40 [ 2644.231151][ T6446] ? alloc_fd+0x35d/0x3b0 [ 2644.235755][ T6446] do_sys_openat2+0xa3/0x250 [ 2644.240369][ T6446] __x64_sys_openat+0xef/0x110 [ 2644.245136][ T6446] do_syscall_64+0x39/0x80 [ 2644.249550][ T6446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2644.255558][ T6446] RIP: 0033:0x419554 [ 2644.259474][ T6446] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2644.279088][ T6446] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2644.287552][ T6446] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2644.295527][ T6446] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2644.303501][ T6446] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2644.311492][ T6446] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2644.319465][ T6446] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2644.327499][ T6454] CPU: 1 PID: 6454 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2644.337582][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.347666][ T6454] Call Trace: [ 2644.350958][ T6454] dump_stack+0x137/0x19d [ 2644.355439][ T6454] should_fail+0x23c/0x250 [ 2644.359891][ T6454] should_fail_usercopy+0x16/0x20 07:25:11 executing program 4 (fault-call:1 fault-nth:4): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2644.364923][ T6454] _copy_to_user+0x1c/0x90 [ 2644.369632][ T6454] drm_ioctl+0x42c/0x5e0 [ 2644.373898][ T6454] ? tsan.module_ctor+0x10/0x10 [ 2644.378761][ T6454] ? do_vfs_ioctl+0x4f7/0xec0 [ 2644.383489][ T6454] ? tomoyo_file_ioctl+0x1c/0x20 [ 2644.388479][ T6454] ? drm_ioctl_kernel+0x2b0/0x2b0 [ 2644.393512][ T6454] __se_sys_ioctl+0xcb/0x140 [ 2644.398119][ T6454] __x64_sys_ioctl+0x3f/0x50 [ 2644.402738][ T6454] do_syscall_64+0x39/0x80 [ 2644.407155][ T6454] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2644.413088][ T6454] RIP: 0033:0x465f69 [ 2644.416963][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2644.436589][ T6454] RSP: 002b:00007fef8ac93188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2644.445064][ T6454] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2644.453038][ T6454] RDX: 0000000000000000 RSI: 0000000000004c02 RDI: 0000000000000003 07:25:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) 07:25:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x89fb, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2644.461299][ T6454] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.469291][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2644.477515][ T6454] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 [ 2644.529909][ T6468] FAULT_INJECTION: forcing a failure. [ 2644.529909][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 2644.559381][ T6468] CPU: 0 PID: 6468 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2644.569631][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.580102][ T6468] Call Trace: [ 2644.583385][ T6468] dump_stack+0x137/0x19d [ 2644.587726][ T6468] should_fail+0x23c/0x250 [ 2644.592326][ T6468] __should_failslab+0x81/0x90 [ 2644.597102][ T6468] ? proc_self_get_link+0x90/0x100 [ 2644.602249][ T6468] should_failslab+0x5/0x20 [ 2644.606768][ T6468] kmem_cache_alloc_trace+0x49/0x340 [ 2644.612055][ T6468] proc_self_get_link+0x90/0x100 [ 2644.617009][ T6468] ? proc_setup_self+0x1d0/0x1d0 [ 2644.621947][ T6468] step_into+0x9b4/0xec0 [ 2644.626205][ T6468] walk_component+0x190/0x350 [ 2644.630928][ T6468] link_path_walk+0x4ba/0x780 [ 2644.635614][ T6468] path_openat+0x1a6/0x21b0 [ 2644.640126][ T6468] do_filp_open+0xbd/0x1d0 [ 2644.644551][ T6468] ? alloc_fd+0x35d/0x3b0 [ 2644.644830][ T6482] FAULT_INJECTION: forcing a failure. [ 2644.644830][ T6482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2644.648881][ T6468] do_sys_openat2+0xa3/0x250 [ 2644.648923][ T6468] __x64_sys_openat+0xef/0x110 [ 2644.648979][ T6468] do_syscall_64+0x39/0x80 07:25:11 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x19]}, 0x40) 07:25:11 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) [ 2644.648997][ T6468] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2644.681853][ T6468] RIP: 0033:0x419554 [ 2644.685777][ T6468] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2644.705395][ T6468] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2644.713906][ T6468] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2644.721889][ T6468] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2644.729868][ T6468] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2644.737868][ T6468] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2644.745867][ T6468] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2644.753852][ T6482] CPU: 1 PID: 6482 Comm: syz-executor.3 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2644.763940][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2644.774005][ T6482] Call Trace: [ 2644.777293][ T6482] dump_stack+0x137/0x19d [ 2644.781631][ T6482] should_fail+0x23c/0x250 [ 2644.786054][ T6482] should_fail_usercopy+0x16/0x20 [ 2644.791085][ T6482] _copy_to_user+0x1c/0x90 [ 2644.795517][ T6482] simple_read_from_buffer+0xab/0x120 [ 2644.800897][ T6482] proc_fail_nth_read+0xf6/0x140 [ 2644.806027][ T6482] ? rw_verify_area+0x136/0x250 [ 2644.810892][ T6482] ? proc_fault_inject_write+0x200/0x200 [ 2644.816524][ T6482] vfs_read+0x154/0x5d0 [ 2644.820686][ T6482] ? __fget_light+0x219/0x260 [ 2644.825350][ T6482] ksys_read+0xce/0x180 [ 2644.829510][ T6482] __x64_sys_read+0x3e/0x50 [ 2644.834052][ T6482] do_syscall_64+0x39/0x80 [ 2644.838461][ T6482] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2644.844337][ T6482] RIP: 0033:0x4191ec [ 2644.848251][ T6482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2644.867853][ T6482] RSP: 002b:00007fef8ac93170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 07:25:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1a]}, 0x40) 07:25:12 executing program 4 (fault-call:1 fault-nth:5): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:12 executing program 1 (fault-call:2 fault-nth:0): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2644.876249][ T6482] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004191ec [ 2644.884406][ T6482] RDX: 000000000000000f RSI: 00007fef8ac931e0 RDI: 0000000000000004 [ 2644.892406][ T6482] RBP: 00007fef8ac931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2644.900378][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2644.908368][ T6482] R13: 00007ffe523670af R14: 00007fef8ac93300 R15: 0000000000022000 07:25:12 executing program 5: bpf$MAP_CREATE(0xec000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x400448c9, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2644.982989][ T6490] FAULT_INJECTION: forcing a failure. [ 2644.982989][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2644.993605][ T6491] FAULT_INJECTION: forcing a failure. [ 2644.993605][ T6491] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.002331][ T6490] CPU: 1 PID: 6490 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2645.018838][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.028908][ T6490] Call Trace: [ 2645.032189][ T6490] dump_stack+0x137/0x19d [ 2645.036543][ T6490] should_fail+0x23c/0x250 [ 2645.040968][ T6490] should_fail_usercopy+0x16/0x20 [ 2645.045991][ T6490] _copy_from_user+0x1c/0xd0 [ 2645.050651][ T6490] ucma_write+0xcc/0x210 [ 2645.054909][ T6490] ? rw_verify_area+0x136/0x250 [ 2645.059777][ T6490] ? ucma_get_global_nl_info+0x50/0x50 [ 2645.065244][ T6490] vfs_write+0x223/0x7e0 [ 2645.069497][ T6490] ? __fget_light+0x219/0x260 [ 2645.074186][ T6490] ksys_write+0xce/0x180 [ 2645.078455][ T6490] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2645.084586][ T6490] __x64_sys_write+0x3e/0x50 [ 2645.089184][ T6490] do_syscall_64+0x39/0x80 [ 2645.093638][ T6490] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.099558][ T6490] RIP: 0033:0x465f69 [ 2645.103482][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.123094][ T6490] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 07:25:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1b]}, 0x40) [ 2645.131514][ T6490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 2645.139492][ T6490] RDX: 0000000000000030 RSI: 0000000020000400 RDI: 0000000000000003 [ 2645.147468][ T6490] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.155444][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2645.163425][ T6490] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 [ 2645.171512][ T6491] CPU: 0 PID: 6491 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 07:25:12 executing program 1 (fault-call:2 fault-nth:1): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2645.181606][ T6491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.191670][ T6491] Call Trace: [ 2645.194953][ T6491] dump_stack+0x137/0x19d [ 2645.199297][ T6491] should_fail+0x23c/0x250 [ 2645.203723][ T6491] ? __d_alloc+0x36/0x370 [ 2645.208074][ T6491] __should_failslab+0x81/0x90 [ 2645.212844][ T6491] should_failslab+0x5/0x20 [ 2645.217344][ T6491] kmem_cache_alloc+0x46/0x320 [ 2645.222095][ T6491] __d_alloc+0x36/0x370 [ 2645.226307][ T6491] d_alloc_parallel+0x51/0xd10 07:25:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) [ 2645.231073][ T6491] ? sprintf+0x71/0x90 [ 2645.235148][ T6491] ? __rcu_read_unlock+0x5c/0x250 [ 2645.240182][ T6491] ? __rcu_read_unlock+0x5c/0x250 [ 2645.245295][ T6491] ? __d_lookup+0x38b/0x3b0 [ 2645.249777][ T6491] ? make_kuid+0x121/0x180 [ 2645.254187][ T6491] ? __down_read_common+0x14e/0x510 [ 2645.259426][ T6491] __lookup_slow+0x7f/0x250 [ 2645.263935][ T6491] walk_component+0x2a5/0x350 [ 2645.268610][ T6491] ? inode_permission+0xb9/0x350 [ 2645.273526][ T6491] link_path_walk+0x4ba/0x780 [ 2645.278205][ T6491] path_openat+0x1a6/0x21b0 [ 2645.282690][ T6491] do_filp_open+0xbd/0x1d0 [ 2645.287155][ T6491] ? noop_direct_IO+0x10/0x10 [ 2645.291811][ T6491] ? alloc_fd+0x35d/0x3b0 [ 2645.296196][ T6491] do_sys_openat2+0xa3/0x250 [ 2645.300874][ T6491] __x64_sys_openat+0xef/0x110 [ 2645.305637][ T6491] do_syscall_64+0x39/0x80 [ 2645.310067][ T6491] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.315958][ T6491] RIP: 0033:0x419554 [ 2645.319833][ T6491] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2645.339441][ T6491] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2645.347836][ T6491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2645.355797][ T6491] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2645.363781][ T6491] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2645.371750][ T6491] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2645.379751][ T6491] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2645.389975][ T3245] ieee802154 phy0 wpan0: encryption failed: -22 [ 2645.396278][ T3245] ieee802154 phy1 wpan1: encryption failed: -22 07:25:12 executing program 4 (fault-call:1 fault-nth:6): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2645.431826][ T6498] FAULT_INJECTION: forcing a failure. [ 2645.431826][ T6498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2645.445110][ T6498] CPU: 0 PID: 6498 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2645.455232][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.465290][ T6498] Call Trace: [ 2645.468589][ T6498] dump_stack+0x137/0x19d [ 2645.472948][ T6498] should_fail+0x23c/0x250 07:25:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1c]}, 0x40) [ 2645.477372][ T6498] should_fail_usercopy+0x16/0x20 [ 2645.482398][ T6498] _copy_from_user+0x1c/0xd0 [ 2645.487021][ T6498] ucma_bind_ip+0x37/0x2b0 [ 2645.491497][ T6498] ucma_write+0x1d5/0x210 [ 2645.495877][ T6498] ? ucma_get_global_nl_info+0x50/0x50 [ 2645.501380][ T6498] vfs_write+0x223/0x7e0 [ 2645.505648][ T6498] ? __fget_light+0x219/0x260 [ 2645.510349][ T6498] ksys_write+0xce/0x180 [ 2645.514675][ T6498] ? fpregs_assert_state_consistent+0x7d/0x90 [ 2645.520753][ T6498] __x64_sys_write+0x3e/0x50 [ 2645.525364][ T6498] do_syscall_64+0x39/0x80 07:25:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x400448dd, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2645.529807][ T6498] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.535713][ T6498] RIP: 0033:0x465f69 [ 2645.539613][ T6498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2645.559324][ T6498] RSP: 002b:00007fef289f0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2645.567757][ T6498] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 07:25:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x400454ca, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:12 executing program 5: bpf$MAP_CREATE(0xff000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2645.575733][ T6498] RDX: 0000000000000030 RSI: 0000000020000400 RDI: 0000000000000003 [ 2645.583774][ T6498] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2645.591797][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2645.599777][ T6498] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 07:25:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x2, 0x0) 07:25:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1d]}, 0x40) 07:25:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x40049409, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:12 executing program 5: bpf$MAP_CREATE(0xff010000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2645.646207][ T6511] FAULT_INJECTION: forcing a failure. [ 2645.646207][ T6511] name failslab, interval 1, probability 0, space 0, times 0 [ 2645.714361][ T6511] CPU: 1 PID: 6511 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2645.724458][ T6511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2645.734619][ T6511] Call Trace: [ 2645.737908][ T6511] dump_stack+0x137/0x19d [ 2645.742244][ T6511] should_fail+0x23c/0x250 [ 2645.746699][ T6511] ? proc_alloc_inode+0x23/0x80 [ 2645.751553][ T6511] __should_failslab+0x81/0x90 [ 2645.756332][ T6511] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 07:25:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x1e]}, 0x40) [ 2645.762684][ T6511] should_failslab+0x5/0x20 [ 2645.767227][ T6511] kmem_cache_alloc+0x46/0x320 [ 2645.771987][ T6511] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2645.778320][ T6511] proc_alloc_inode+0x23/0x80 [ 2645.783048][ T6511] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2645.789378][ T6511] new_inode_pseudo+0x38/0x190 [ 2645.794223][ T6511] new_inode+0x21/0x100 [ 2645.798445][ T6511] proc_pid_make_inode+0x24/0x1e0 [ 2645.803496][ T6511] ? __rcu_read_unlock+0x5c/0x250 [ 2645.808523][ T6511] proc_pident_instantiate+0x40/0x190 [ 2645.813933][ T6511] proc_tgid_base_lookup+0x10c/0x180 [ 2645.819264][ T6511] __lookup_slow+0x181/0x250 [ 2645.823981][ T6511] walk_component+0x2a5/0x350 [ 2645.828742][ T6511] ? inode_permission+0xb9/0x350 [ 2645.833786][ T6511] link_path_walk+0x4ba/0x780 [ 2645.838464][ T6511] path_openat+0x1a6/0x21b0 [ 2645.842952][ T6511] do_filp_open+0xbd/0x1d0 [ 2645.847395][ T6511] ? noop_direct_IO+0x10/0x10 [ 2645.852071][ T6511] ? alloc_fd+0x35d/0x3b0 [ 2645.856392][ T6511] do_sys_openat2+0xa3/0x250 [ 2645.860979][ T6511] __x64_sys_openat+0xef/0x110 [ 2645.865781][ T6511] do_syscall_64+0x39/0x80 [ 2645.870194][ T6511] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2645.876107][ T6511] RIP: 0033:0x419554 [ 2645.880126][ T6511] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2645.899797][ T6511] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 07:25:13 executing program 1 (fault-call:2 fault-nth:2): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x21]}, 0x40) [ 2645.908195][ T6511] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2645.916220][ T6511] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2645.924335][ T6511] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2645.932291][ T6511] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2645.940254][ T6511] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:13 executing program 4 (fault-call:1 fault-nth:7): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:13 executing program 5: bpf$MAP_CREATE(0xff020000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x10, 0x0) 07:25:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x401070ca, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2645.983035][ T6531] FAULT_INJECTION: forcing a failure. [ 2645.983035][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2646.005851][ T6531] CPU: 1 PID: 6531 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2646.015945][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.026072][ T6531] Call Trace: 07:25:13 executing program 5: bpf$MAP_CREATE(0xffff8000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2646.029354][ T6531] dump_stack+0x137/0x19d [ 2646.033696][ T6531] should_fail+0x23c/0x250 [ 2646.038117][ T6531] should_fail_usercopy+0x16/0x20 [ 2646.043231][ T6531] _copy_to_user+0x1c/0x90 [ 2646.047690][ T6531] simple_read_from_buffer+0xab/0x120 [ 2646.053085][ T6531] proc_fail_nth_read+0xf6/0x140 [ 2646.058066][ T6531] ? rw_verify_area+0x136/0x250 [ 2646.062928][ T6531] ? proc_fault_inject_write+0x200/0x200 [ 2646.068566][ T6531] vfs_read+0x154/0x5d0 [ 2646.072762][ T6531] ? __fget_light+0x219/0x260 [ 2646.077511][ T6531] ksys_read+0xce/0x180 07:25:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c01, 0x0) [ 2646.081677][ T6531] __x64_sys_read+0x3e/0x50 [ 2646.086167][ T6531] do_syscall_64+0x39/0x80 [ 2646.090588][ T6531] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2646.096518][ T6531] RIP: 0033:0x4191ec [ 2646.100393][ T6531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2646.119999][ T6531] RSP: 002b:00007fef289f0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 07:25:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x22]}, 0x40) 07:25:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x40186366, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2646.128418][ T6531] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00000000004191ec [ 2646.136400][ T6531] RDX: 000000000000000f RSI: 00007fef289f01e0 RDI: 0000000000000004 [ 2646.144351][ T6531] RBP: 00007fef289f01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2646.152304][ T6531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2646.160259][ T6531] R13: 00007ffe7ba8991f R14: 00007fef289f0300 R15: 0000000000022000 07:25:13 executing program 5: bpf$MAP_CREATE(0x1000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c03, 0x0) 07:25:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0xd, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2646.241940][ T6555] FAULT_INJECTION: forcing a failure. [ 2646.241940][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.259491][ T6555] CPU: 1 PID: 6555 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2646.269586][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.279643][ T6555] Call Trace: [ 2646.282924][ T6555] dump_stack+0x137/0x19d [ 2646.287323][ T6555] should_fail+0x23c/0x250 [ 2646.292522][ T6555] ? security_inode_alloc+0x30/0x180 [ 2646.297847][ T6555] __should_failslab+0x81/0x90 [ 2646.302697][ T6555] should_failslab+0x5/0x20 [ 2646.307235][ T6555] kmem_cache_alloc+0x46/0x320 [ 2646.312040][ T6555] security_inode_alloc+0x30/0x180 [ 2646.317253][ T6555] inode_init_always+0x222/0x440 [ 2646.322195][ T6555] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2646.328621][ T6555] new_inode_pseudo+0x6f/0x190 [ 2646.333473][ T6555] new_inode+0x21/0x100 [ 2646.337630][ T6555] proc_pid_make_inode+0x24/0x1e0 [ 2646.342728][ T6555] ? __rcu_read_unlock+0x5c/0x250 [ 2646.347760][ T6555] proc_pident_instantiate+0x40/0x190 [ 2646.353263][ T6555] proc_tgid_base_lookup+0x10c/0x180 [ 2646.358565][ T6555] __lookup_slow+0x181/0x250 [ 2646.363190][ T6555] walk_component+0x2a5/0x350 [ 2646.367877][ T6555] ? inode_permission+0xb9/0x350 [ 2646.372820][ T6555] link_path_walk+0x4ba/0x780 [ 2646.377590][ T6555] path_openat+0x1a6/0x21b0 [ 2646.382106][ T6555] do_filp_open+0xbd/0x1d0 [ 2646.386529][ T6555] ? noop_direct_IO+0x10/0x10 [ 2646.391326][ T6555] ? alloc_fd+0x35d/0x3b0 [ 2646.395675][ T6555] do_sys_openat2+0xa3/0x250 [ 2646.400314][ T6555] __x64_sys_openat+0xef/0x110 [ 2646.405130][ T6555] do_syscall_64+0x39/0x80 [ 2646.409633][ T6555] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2646.415565][ T6555] RIP: 0033:0x419554 [ 2646.419467][ T6555] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2646.439086][ T6555] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2646.447507][ T6555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2646.455480][ T6555] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2646.463451][ T6555] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2646.471417][ T6555] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2646.479386][ T6555] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:13 executing program 4 (fault-call:1 fault-nth:8): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x23]}, 0x40) 07:25:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x16, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c04, 0x0) 07:25:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x4020940d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:13 executing program 5: bpf$MAP_CREATE(0x2000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:13 executing program 5: bpf$MAP_CREATE(0x3000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0x80086301, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:13 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c05, 0x0) 07:25:13 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa02, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2646.595620][ T6581] FAULT_INJECTION: forcing a failure. [ 2646.595620][ T6581] name failslab, interval 1, probability 0, space 0, times 0 07:25:13 executing program 5: bpf$MAP_CREATE(0x4000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2646.668381][ T6581] CPU: 0 PID: 6581 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2646.678481][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.688541][ T6581] Call Trace: [ 2646.691826][ T6581] dump_stack+0x137/0x19d [ 2646.696219][ T6581] should_fail+0x23c/0x250 [ 2646.700636][ T6581] ? __d_alloc+0x36/0x370 [ 2646.704981][ T6581] __should_failslab+0x81/0x90 [ 2646.709749][ T6581] should_failslab+0x5/0x20 [ 2646.714364][ T6581] kmem_cache_alloc+0x46/0x320 [ 2646.719219][ T6581] __d_alloc+0x36/0x370 [ 2646.723473][ T6581] d_alloc_parallel+0x51/0xd10 [ 2646.728263][ T6581] ? __d_lookup+0x38b/0x3b0 [ 2646.732764][ T6581] path_openat+0x686/0x21b0 [ 2646.737277][ T6581] do_filp_open+0xbd/0x1d0 [ 2646.741696][ T6581] ? noop_direct_IO+0x10/0x10 [ 2646.746376][ T6581] ? alloc_fd+0x35d/0x3b0 [ 2646.750718][ T6581] do_sys_openat2+0xa3/0x250 [ 2646.755426][ T6581] __x64_sys_openat+0xef/0x110 [ 2646.760195][ T6581] do_syscall_64+0x39/0x80 [ 2646.764691][ T6581] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2646.770668][ T6581] RIP: 0033:0x419554 [ 2646.774564][ T6581] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2646.794267][ T6581] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2646.802717][ T6581] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2646.810711][ T6581] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c 07:25:14 executing program 4 (fault-call:1 fault-nth:9): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:14 executing program 5: bpf$MAP_CREATE(0x8000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c06, 0x0) 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa06, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2646.818669][ T6581] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2646.826644][ T6581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2646.834609][ T6581] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:14 executing program 5: bpf$MAP_CREATE(0x9000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2646.897925][ T6605] FAULT_INJECTION: forcing a failure. [ 2646.897925][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 2646.934816][ T6605] CPU: 0 PID: 6605 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc0045878, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x3]}, 0x40) [ 2646.944906][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.954973][ T6605] Call Trace: [ 2646.958250][ T6605] dump_stack+0x137/0x19d [ 2646.962615][ T6605] should_fail+0x23c/0x250 [ 2646.967030][ T6605] ? proc_alloc_inode+0x23/0x80 [ 2646.971883][ T6605] __should_failslab+0x81/0x90 [ 2646.976654][ T6605] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2646.983060][ T6605] should_failslab+0x5/0x20 [ 2646.987611][ T6605] kmem_cache_alloc+0x46/0x320 [ 2646.992377][ T6605] ? d_set_d_op+0xa4/0x220 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c64ce, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c07, 0x0) [ 2646.996831][ T6605] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2647.003172][ T6605] proc_alloc_inode+0x23/0x80 [ 2647.007859][ T6605] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2647.014271][ T6605] new_inode_pseudo+0x38/0x190 [ 2647.019066][ T6605] new_inode+0x21/0x100 [ 2647.023228][ T6605] proc_pid_make_inode+0x24/0x1e0 [ 2647.028262][ T6605] ? __rcu_read_unlock+0x5c/0x250 [ 2647.033301][ T6605] proc_fd_instantiate+0x32/0x160 [ 2647.038369][ T6605] proc_lookupfd+0xa7/0x160 [ 2647.042880][ T6605] ? proc_fd_permission+0xc0/0xc0 07:25:14 executing program 5: bpf$MAP_CREATE(0xa000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2647.047937][ T6605] path_openat+0xaca/0x21b0 [ 2647.052462][ T6605] do_filp_open+0xbd/0x1d0 [ 2647.056901][ T6605] ? noop_direct_IO+0x10/0x10 [ 2647.061586][ T6605] ? alloc_fd+0x35d/0x3b0 [ 2647.065937][ T6605] do_sys_openat2+0xa3/0x250 [ 2647.070597][ T6605] __x64_sys_openat+0xef/0x110 [ 2647.075368][ T6605] do_syscall_64+0x39/0x80 [ 2647.079817][ T6605] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2647.085734][ T6605] RIP: 0033:0x419554 [ 2647.089619][ T6605] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2647.109292][ T6605] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2647.117689][ T6605] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2647.125687][ T6605] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2647.133649][ T6605] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2647.141606][ T6605] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2647.149562][ T6605] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:14 executing program 4 (fault-call:1 fault-nth:10): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfafc, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c08, 0x0) 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc0189436, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:14 executing program 5: bpf$MAP_CREATE(0xb000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2647.267629][ T6631] FAULT_INJECTION: forcing a failure. [ 2647.267629][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 2647.305290][ T6631] CPU: 0 PID: 6631 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 07:25:14 executing program 5: bpf$MAP_CREATE(0x40000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4cce, 0x0) [ 2647.315519][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.325670][ T6631] Call Trace: [ 2647.328958][ T6631] dump_stack+0x137/0x19d [ 2647.333374][ T6631] should_fail+0x23c/0x250 [ 2647.337869][ T6631] ? security_inode_alloc+0x30/0x180 [ 2647.343175][ T6631] __should_failslab+0x81/0x90 [ 2647.347942][ T6631] should_failslab+0x5/0x20 [ 2647.352498][ T6631] kmem_cache_alloc+0x46/0x320 [ 2647.357278][ T6631] security_inode_alloc+0x30/0x180 [ 2647.362446][ T6631] inode_init_always+0x222/0x440 07:25:14 executing program 5: bpf$MAP_CREATE(0x80ffff00000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2647.367383][ T6631] ? proc_invalidate_siblings_dcache+0x2d0/0x2d0 [ 2647.373744][ T6631] new_inode_pseudo+0x6f/0x190 [ 2647.378524][ T6631] new_inode+0x21/0x100 [ 2647.382692][ T6631] proc_pid_make_inode+0x24/0x1e0 [ 2647.387727][ T6631] ? __rcu_read_unlock+0x5c/0x250 [ 2647.392771][ T6631] proc_fd_instantiate+0x32/0x160 [ 2647.397798][ T6631] proc_lookupfd+0xa7/0x160 [ 2647.402368][ T6631] ? proc_fd_permission+0xc0/0xc0 [ 2647.407457][ T6631] path_openat+0xaca/0x21b0 [ 2647.411965][ T6631] do_filp_open+0xbd/0x1d0 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc020660b, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:14 executing program 5: bpf$MAP_CREATE(0x100000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2647.416381][ T6631] ? noop_direct_IO+0x10/0x10 [ 2647.421064][ T6631] ? alloc_fd+0x35d/0x3b0 [ 2647.425472][ T6631] do_sys_openat2+0xa3/0x250 [ 2647.430085][ T6631] __x64_sys_openat+0xef/0x110 [ 2647.434865][ T6631] do_syscall_64+0x39/0x80 [ 2647.439339][ T6631] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2647.445244][ T6631] RIP: 0033:0x419554 [ 2647.449140][ T6631] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2647.468814][ T6631] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2647.477267][ T6631] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2647.485244][ T6631] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2647.493215][ T6631] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2647.501196][ T6631] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2647.509170][ T6631] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:14 executing program 4 (fault-call:1 fault-nth:11): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x541b, 0x0) 07:25:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:14 executing program 5: bpf$MAP_CREATE(0x200000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x81, 0x2, 0x0, @mcast1, @remote, 0x8000, 0x8, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl1\x00', r2, 0x2f, 0x5, 0x5, 0x83, 0x10, @private0={0xfc, 0x0, [], 0x1}, @private2, 0x7, 0x7800, 0x17a, 0x6}}) 07:25:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x6, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:14 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfc, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5421, 0x0) 07:25:14 executing program 5: bpf$MAP_CREATE(0x300000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2647.632473][ T6669] FAULT_INJECTION: forcing a failure. [ 2647.632473][ T6669] name failslab, interval 1, probability 0, space 0, times 0 07:25:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) sendmsg$alg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="4780ae053cbbb4b58a0dbca35b4acd22d8947840034ccf794e34f9cf266c02710da7b020e9a739a62f1f584805a2a48fc8e1cf5807d36e2f33768b5e8bc15f147c96c4318728344a1b099d08d7c4a6712d9a5086db6153d186f4444a5d6c05ff1fbb9464b972628c3874c6a587df49e208903382e0a923f194318199ea72d125b91c917edd67423f6a71fb6ce01599187a3329e6dee3e4966511481ca03e9c0d26dc1e0e28e669583747723032e8524623a6edbb7a0bcaff2b8ec593fed4be48c5c9d732357a59f8390f7dd4035b4b5daf20", 0xd2}, {&(0x7f00000001c0)="ec6c10bfcbd9ef9450cd64a2ca0ce63dcbcbc3a25a36c5d28fe5e258dc465d6b649df5a9ee26691e7bad63910f289490eacb6cd365ee99816c53236a8cd37ea7b4bc54044245cafd2421655bb80cb780a1b5f7b40eb9d0f9807cd746474481141fd83357d87a47c0926215c54a81008d7b", 0x71}, {&(0x7f0000000480)="c96d07bbd52142e9304c3872ce94c62e204b4382b28c4735a924d5b92a195b3166b63de903ffae610b9432e9d51299abadd01a9cdb4f9c2f64a75c1489b45da6a33d1862191c53affc526f2df07514854058c40e563c7600ea4b2d7de5764cc5264921bfd60eaf58b840be9da54b7a1a053ee1a709958afc0da58acfd42f64fcac520db677cdfce1e50eecba01a60b8e8e9967fd863c0cf1711174ca7df60ed3b1ae272fc3b1c448feeac3154735b0", 0xaf}, {&(0x7f0000000300)="a5735cca25fe3bf4f108f64caccb5a038db78327215b8f08691fa078f82eab1fe82453ca825e766e7cc050fb0d54c39325fe5ded2bc3c37e46b3de891a5835d1b080d16c08d196a423d6e39f414910e464608761b5a83ba81469d65b45748c2dd883a3a769c3983588f326831ed3eac3a68e4fd464dbaeea282288a3678f2a36", 0xfd18}], 0x4, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x4000000}, 0x24004080) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x80100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2647.695039][ T6669] CPU: 0 PID: 6669 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2647.705142][ T6669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.715211][ T6669] Call Trace: [ 2647.718497][ T6669] dump_stack+0x137/0x19d [ 2647.722874][ T6669] should_fail+0x23c/0x250 [ 2647.727297][ T6669] __should_failslab+0x81/0x90 [ 2647.732111][ T6669] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 2647.737839][ T6669] should_failslab+0x5/0x20 [ 2647.742349][ T6669] __kmalloc+0x66/0x380 [ 2647.746508][ T6669] tomoyo_realpath_from_path+0x98/0x3b0 [ 2647.752099][ T6669] tomoyo_check_open_permission+0xaf/0x370 [ 2647.757914][ T6669] ? __rcu_read_unlock+0x5c/0x250 [ 2647.762950][ T6669] tomoyo_file_open+0xd3/0xf0 [ 2647.767730][ T6669] security_file_open+0x3f/0x90 [ 2647.772598][ T6669] do_dentry_open+0x22d/0x890 [ 2647.777285][ T6669] vfs_open+0x43/0x50 [ 2647.781271][ T6669] path_openat+0x1982/0x21b0 [ 2647.785899][ T6669] do_filp_open+0xbd/0x1d0 [ 2647.790326][ T6669] ? alloc_fd+0x35d/0x3b0 [ 2647.794659][ T6669] do_sys_openat2+0xa3/0x250 [ 2647.799257][ T6669] __x64_sys_openat+0xef/0x110 [ 2647.804039][ T6669] do_syscall_64+0x39/0x80 [ 2647.808457][ T6669] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2647.814400][ T6669] RIP: 0033:0x419554 [ 2647.818293][ T6669] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 07:25:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5450, 0x0) [ 2647.837902][ T6669] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2647.846322][ T6669] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2647.854298][ T6669] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2647.862277][ T6669] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2647.870253][ T6669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2647.878229][ T6669] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2647.887343][ T6669] ERROR: Out of memory at tomoyo_realpath_from_path. 07:25:15 executing program 4 (fault-call:1 fault-nth:12): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e24, @empty}}}, 0x118) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:15 executing program 5: bpf$MAP_CREATE(0x400000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5451, 0x0) 07:25:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x600, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5452, 0x0) 07:25:15 executing program 5: bpf$MAP_CREATE(0x500000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2648.037477][ T6698] FAULT_INJECTION: forcing a failure. [ 2648.037477][ T6698] name failslab, interval 1, probability 0, space 0, times 0 07:25:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x6, 0x115102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x80fe, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2648.083848][ T6698] CPU: 0 PID: 6698 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2648.093994][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.104062][ T6698] Call Trace: [ 2648.107341][ T6698] dump_stack+0x137/0x19d [ 2648.111673][ T6698] should_fail+0x23c/0x250 [ 2648.116090][ T6698] __should_failslab+0x81/0x90 [ 2648.120866][ T6698] ? tomoyo_encode2+0x1d3/0x350 [ 2648.125731][ T6698] should_failslab+0x5/0x20 [ 2648.130242][ T6698] __kmalloc+0x66/0x380 07:25:15 executing program 5: bpf$MAP_CREATE(0x600000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2648.134460][ T6698] tomoyo_encode2+0x1d3/0x350 [ 2648.139193][ T6698] tomoyo_realpath_from_path+0x35e/0x3b0 [ 2648.144851][ T6698] tomoyo_check_open_permission+0xaf/0x370 [ 2648.150682][ T6698] ? __rcu_read_unlock+0x5c/0x250 [ 2648.155734][ T6698] tomoyo_file_open+0xd3/0xf0 [ 2648.160492][ T6698] security_file_open+0x3f/0x90 [ 2648.165328][ T6698] do_dentry_open+0x22d/0x890 [ 2648.170056][ T6698] vfs_open+0x43/0x50 [ 2648.174071][ T6698] path_openat+0x1982/0x21b0 [ 2648.178644][ T6698] do_filp_open+0xbd/0x1d0 [ 2648.183191][ T6698] ? alloc_fd+0x35d/0x3b0 [ 2648.187508][ T6698] do_sys_openat2+0xa3/0x250 [ 2648.192138][ T6698] __x64_sys_openat+0xef/0x110 [ 2648.196923][ T6698] do_syscall_64+0x39/0x80 [ 2648.201393][ T6698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2648.207273][ T6698] RIP: 0033:0x419554 [ 2648.211156][ T6698] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 2648.230765][ T6698] RSP: 002b:00007fe12119d060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2648.239183][ T6698] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419554 [ 2648.247168][ T6698] RDX: 0000000000000002 RSI: 00007fe12119d0f0 RDI: 00000000ffffff9c [ 2648.255141][ T6698] RBP: 00007fe12119d0f0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2648.263097][ T6698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2648.271067][ T6698] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:15 executing program 4 (fault-call:1 fault-nth:13): syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x5460, 0x0) 07:25:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x400000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) [ 2648.294708][ T6698] ERROR: Out of memory at tomoyo_realpath_from_path. 07:25:15 executing program 5: bpf$MAP_CREATE(0x700000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfc00, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2648.394108][ T6720] FAULT_INJECTION: forcing a failure. [ 2648.394108][ T6720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2648.427221][ T6720] CPU: 1 PID: 6720 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 07:25:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x200, 0x101041) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000000)) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x6, 0x8, 0xf9, &(0x7f0000000100)="f930bb9fd9d04d6b63591717a53ff912534a484cda2b6cc10cbf5a7367cb1cceff9183787c58c52c6bc72162defc8e534e15e1eb081e47f920cd5585f93f1eb213c4435b7b65c7065f9383d103d085487f1fc22a8753cbe9c4ffe9c0641b6dcc138357b3e92ba8289df95028d1eba53eae90203c8169d28dbae21f29eca94ec2ae8c5601da9315839a375224150ec8212d733ada91cb5f33c8729b3267f39001ee390394211eb8f34e59e23cc3cbfa72cbb4eec5bd1faf8b764774e696f8767145dde2490592200d50b8eebfddaf1e762578651a5c07c5145950a1843b5fb650876a93a0b5fd9001051ea34ce72605b0005fd6bc1d75d516f0"}) 07:25:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x6364, 0x0) 07:25:15 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xb]}, 0x40) [ 2648.437353][ T6720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.447410][ T6720] Call Trace: [ 2648.450728][ T6720] dump_stack+0x137/0x19d [ 2648.455064][ T6720] should_fail+0x23c/0x250 [ 2648.459543][ T6720] should_fail_usercopy+0x16/0x20 [ 2648.464574][ T6720] _copy_to_user+0x1c/0x90 [ 2648.469048][ T6720] simple_read_from_buffer+0xab/0x120 [ 2648.474506][ T6720] proc_fail_nth_read+0xf6/0x140 [ 2648.479450][ T6720] ? rw_verify_area+0x136/0x250 [ 2648.484306][ T6720] ? proc_fault_inject_write+0x200/0x200 [ 2648.489992][ T6720] vfs_read+0x154/0x5d0 [ 2648.494154][ T6720] ? __fget_light+0x219/0x260 [ 2648.498963][ T6720] ksys_read+0xce/0x180 [ 2648.503160][ T6720] __x64_sys_read+0x3e/0x50 [ 2648.507646][ T6720] do_syscall_64+0x39/0x80 [ 2648.512065][ T6720] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2648.517947][ T6720] RIP: 0033:0x4191ec [ 2648.521834][ T6720] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 07:25:15 executing program 5: bpf$MAP_CREATE(0x800000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) [ 2648.541652][ T6720] RSP: 002b:00007fe12119d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2648.550183][ T6720] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004191ec [ 2648.558161][ T6720] RDX: 000000000000000f RSI: 00007fe12119d1e0 RDI: 0000000000000004 [ 2648.566150][ T6720] RBP: 00007fe12119d1d0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2648.574107][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2648.582060][ T6720] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 07:25:15 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfe80, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2648.590377][ C1] ------------[ cut here ]------------ [ 2648.595835][ C1] WARNING: CPU: 1 PID: 6720 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2648.606599][ C1] Modules linked in: [ 2648.610484][ C1] CPU: 1 PID: 6720 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2648.620541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.630577][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2648.636543][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2648.656145][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2648.662231][ C1] RAX: ffffffff82eb2979 RBX: 000000000000000a RCX: ffff88809aecd000 [ 2648.670211][ C1] RDX: 0000000000010001 RSI: 000000000000000a RDI: 0000000000000001 [ 2648.678162][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2648.686137][ C1] R10: 0001ffffffffffff R11: 00000000000002ff R12: ffff88813bd1da58 [ 2648.694105][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2648.702077][ C1] FS: 00007fe12119d700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2648.711008][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2648.717601][ C1] CR2: 00007fef289cf718 CR3: 000000009afa3000 CR4: 00000000001506e0 [ 2648.725566][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2648.733514][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2648.741488][ C1] Call Trace: [ 2648.744760][ C1] [ 2648.747605][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2648.753392][ C1] __run_hrtimer+0x163/0x460 [ 2648.757967][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2648.762897][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2648.768772][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2648.774389][ C1] [ 2648.777323][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2648.783308][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2648.789095][ C1] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2648.808682][ C1] RSP: 0018:ffffc900186b3bf8 EFLAGS: 00000202 [ 2648.814734][ C1] RAX: 0000000000000000 RBX: ffff88809aecd000 RCX: ffffffff85a00e37 [ 2648.822703][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2648.830660][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2648.838620][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2648.846590][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2648.854564][ C1] ? native_iret+0x7/0x7 [ 2648.858820][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 2648.864360][ C1] irqentry_exit+0x2a/0x40 [ 2648.868754][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2648.874227][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 2648.879335][ C1] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2648.898938][ C1] RSP: 0018:ffffc900186b3cd0 EFLAGS: 00000283 [ 2648.905020][ C1] RAX: 071ba0900561c500 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2648.912974][ C1] RDX: ffffc900105d4000 RSI: 000000000001a506 RDI: 000000000001a507 [ 2648.920938][ C1] RBP: 0000000000000001 R08: ffffffff82a5fc61 R09: 000188809aecd3cf [ 2648.928913][ C1] R10: 0001ffffffffffff R11: ffff88809aecd000 R12: ffffffff878d2648 [ 2648.936887][ C1] R13: 0000000000000001 R14: ffffffff878d2660 R15: 0000000000000200 [ 2648.944855][ C1] ? dump_stack+0x15e/0x19d [ 2648.949354][ C1] should_fail+0x23c/0x250 [ 2648.953796][ C1] should_fail_usercopy+0x16/0x20 [ 2648.958824][ C1] _copy_to_user+0x1c/0x90 [ 2648.963229][ C1] simple_read_from_buffer+0xab/0x120 [ 2648.968596][ C1] proc_fail_nth_read+0xf6/0x140 [ 2648.973512][ C1] ? rw_verify_area+0x136/0x250 [ 2648.978375][ C1] ? proc_fault_inject_write+0x200/0x200 [ 2648.983988][ C1] vfs_read+0x154/0x5d0 [ 2648.988123][ C1] ? __fget_light+0x219/0x260 [ 2648.992792][ C1] ksys_read+0xce/0x180 [ 2648.996929][ C1] __x64_sys_read+0x3e/0x50 [ 2649.001411][ C1] do_syscall_64+0x39/0x80 [ 2649.005827][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2649.011713][ C1] RIP: 0033:0x4191ec [ 2649.015600][ C1] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2649.035275][ C1] RSP: 002b:00007fe12119d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2649.043677][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004191ec [ 2649.051656][ C1] RDX: 000000000000000f RSI: 00007fe12119d1e0 RDI: 0000000000000004 [ 2649.059626][ C1] RBP: 00007fe12119d1d0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2649.067577][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2649.075540][ C1] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2649.083515][ C1] ---[ end trace 3a4894fd838675ad ]--- [ 2649.089333][ C1] ------------[ cut here ]------------ [ 2649.094782][ C1] WARNING: CPU: 1 PID: 6720 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2649.105560][ C1] Modules linked in: [ 2649.109468][ C1] CPU: 1 PID: 6720 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2649.119539][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2649.129576][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2649.135546][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2649.155153][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2649.161223][ C1] RAX: ffffffff82eb2979 RBX: 000000000000001e RCX: ffff88809aecd000 [ 2649.169186][ C1] RDX: 0000000000010001 RSI: 000000000000001e RDI: 0000000000000001 [ 2649.177156][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2649.185114][ C1] R10: 0001ffffffffffff R11: ffff88809aecd000 R12: ffff88813bd1da58 [ 2649.193677][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2649.201646][ C1] FS: 00007fe12119d700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2649.210554][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2649.217123][ C1] CR2: 00007fef289cf718 CR3: 000000009afa3000 CR4: 00000000001506e0 [ 2649.225092][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2649.233051][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2649.241038][ C1] Call Trace: [ 2649.244298][ C1] [ 2649.247132][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2649.252931][ C1] __run_hrtimer+0x163/0x460 [ 2649.257510][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2649.263308][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2649.268240][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2649.274116][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2649.279758][ C1] [ 2649.282685][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.288681][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2649.294479][ C1] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2649.314088][ C1] RSP: 0018:ffffc900186b3bf8 EFLAGS: 00000202 [ 2649.320135][ C1] RAX: 0000000000000000 RBX: ffff88809aecd000 RCX: ffffffff85a00e37 [ 2649.328100][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2649.336150][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2649.344107][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2649.352057][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2649.360027][ C1] ? native_iret+0x7/0x7 [ 2649.364300][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 2649.369829][ C1] irqentry_exit+0x2a/0x40 [ 2649.374227][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2649.379669][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 2649.384764][ C1] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2649.404372][ C1] RSP: 0018:ffffc900186b3cd0 EFLAGS: 00000283 [ 2649.410424][ C1] RAX: 071ba0900561c500 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2649.418416][ C1] RDX: ffffc900105d4000 RSI: 000000000001a506 RDI: 000000000001a507 [ 2649.426395][ C1] RBP: 0000000000000001 R08: ffffffff82a5fc61 R09: 000188809aecd3cf [ 2649.434353][ C1] R10: 0001ffffffffffff R11: ffff88809aecd000 R12: ffffffff878d2648 [ 2649.442315][ C1] R13: 0000000000000001 R14: ffffffff878d2660 R15: 0000000000000200 [ 2649.450302][ C1] ? dump_stack+0x15e/0x19d [ 2649.454796][ C1] should_fail+0x23c/0x250 [ 2649.459200][ C1] should_fail_usercopy+0x16/0x20 [ 2649.464226][ C1] _copy_to_user+0x1c/0x90 [ 2649.468636][ C1] simple_read_from_buffer+0xab/0x120 [ 2649.474001][ C1] proc_fail_nth_read+0xf6/0x140 [ 2649.478969][ C1] ? rw_verify_area+0x136/0x250 [ 2649.483820][ C1] ? proc_fault_inject_write+0x200/0x200 [ 2649.489473][ C1] vfs_read+0x154/0x5d0 [ 2649.493619][ C1] ? __fget_light+0x219/0x260 [ 2649.498286][ C1] ksys_read+0xce/0x180 [ 2649.502445][ C1] __x64_sys_read+0x3e/0x50 [ 2649.506930][ C1] do_syscall_64+0x39/0x80 [ 2649.511324][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2649.517257][ C1] RIP: 0033:0x4191ec [ 2649.521143][ C1] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2649.540736][ C1] RSP: 002b:00007fe12119d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2649.549135][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004191ec [ 2649.557086][ C1] RDX: 000000000000000f RSI: 00007fe12119d1e0 RDI: 0000000000000004 [ 2649.565039][ C1] RBP: 00007fe12119d1d0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2649.572988][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2649.580991][ C1] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2649.588983][ C1] ---[ end trace 3a4894fd838675ae ]--- [ 2649.594674][ C1] ------------[ cut here ]------------ [ 2649.600112][ C1] WARNING: CPU: 1 PID: 6720 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2649.610873][ C1] Modules linked in: [ 2649.614746][ C1] CPU: 1 PID: 6720 Comm: syz-executor.4 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2649.624786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2649.634823][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2649.640804][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2649.660410][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2649.666472][ C1] RAX: ffffffff82eb2979 RBX: 000000000000001e RCX: ffff88809aecd000 [ 2649.674431][ C1] RDX: 0000000000010001 RSI: 000000000000001e RDI: 0000000000000001 [ 2649.682386][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2649.690359][ C1] R10: 0001ffffffffffff R11: ffff88809aecd000 R12: ffff88813bd1da58 [ 2649.698315][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2649.706289][ C1] FS: 00007fe12119d700(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2649.715242][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2649.721875][ C1] CR2: 00007fef289cf718 CR3: 000000009afa3000 CR4: 00000000001506e0 [ 2649.729852][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2649.737821][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2649.745779][ C1] Call Trace: [ 2649.749068][ C1] [ 2649.751898][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2649.757725][ C1] __run_hrtimer+0x163/0x460 [ 2649.762294][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2649.768094][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2649.773028][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2649.778922][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2649.784532][ C1] [ 2649.787456][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.793420][ C1] RIP: 0010:preempt_schedule_irq+0x3e/0x80 [ 2649.799213][ C1] Code: 05 9f 20 77 7a a9 ff ff ff 7f 75 53 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 0f 1f 00 65 83 05 80 20 77 7a 01 fb bf 01 00 00 00 2d f8 ff ff fa 65 83 05 6c 20 77 7a ff 65 48 8b 04 25 00 6d 01 [ 2649.818859][ C1] RSP: 0018:ffffc900186b3bf8 EFLAGS: 00000202 [ 2649.824914][ C1] RAX: 0000000000000000 RBX: ffff88809aecd000 RCX: ffffffff85a00e37 [ 2649.832884][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2649.840836][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2649.848832][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2649.856801][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2649.864821][ C1] ? native_iret+0x7/0x7 [ 2649.869079][ C1] irqentry_exit_cond_resched+0x30/0x40 [ 2649.874643][ C1] irqentry_exit+0x2a/0x40 [ 2649.879044][ C1] asm_sysvec_reschedule_ipi+0x12/0x20 [ 2649.884532][ C1] RIP: 0010:dump_stack+0x17d/0x19d [ 2649.889641][ C1] Code: 00 02 00 00 31 ff e8 df 38 a0 fe 49 81 e7 00 02 00 00 75 07 e8 21 34 a0 fe eb 06 e8 1a 34 a0 fe fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 0b 48 83 c4 10 5b 41 5e 41 5f 5d c3 e8 89 60 e3 [ 2649.909242][ C1] RSP: 0018:ffffc900186b3cd0 EFLAGS: 00000283 [ 2649.915290][ C1] RAX: 071ba0900561c500 RBX: 00000000ffffffff RCX: 0000000000040000 [ 2649.923256][ C1] RDX: ffffc900105d4000 RSI: 000000000001a506 RDI: 000000000001a507 [ 2649.931207][ C1] RBP: 0000000000000001 R08: ffffffff82a5fc61 R09: 000188809aecd3cf [ 2649.939182][ C1] R10: 0001ffffffffffff R11: ffff88809aecd000 R12: ffffffff878d2648 [ 2649.947149][ C1] R13: 0000000000000001 R14: ffffffff878d2660 R15: 0000000000000200 [ 2649.955113][ C1] ? dump_stack+0x15e/0x19d [ 2649.959604][ C1] should_fail+0x23c/0x250 [ 2649.964004][ C1] should_fail_usercopy+0x16/0x20 [ 2649.969049][ C1] _copy_to_user+0x1c/0x90 [ 2649.973458][ C1] simple_read_from_buffer+0xab/0x120 [ 2649.978845][ C1] proc_fail_nth_read+0xf6/0x140 [ 2649.983768][ C1] ? rw_verify_area+0x136/0x250 [ 2649.988610][ C1] ? proc_fault_inject_write+0x200/0x200 [ 2649.994231][ C1] vfs_read+0x154/0x5d0 [ 2649.998374][ C1] ? __fget_light+0x219/0x260 [ 2650.003030][ C1] ksys_read+0xce/0x180 [ 2650.007187][ C1] __x64_sys_read+0x3e/0x50 [ 2650.011690][ C1] do_syscall_64+0x39/0x80 [ 2650.016098][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2650.021976][ C1] RIP: 0033:0x4191ec [ 2650.025878][ C1] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 07:25:17 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') [ 2650.045501][ C1] RSP: 002b:00007fe12119d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2650.053919][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000004191ec [ 2650.061897][ C1] RDX: 000000000000000f RSI: 00007fe12119d1e0 RDI: 0000000000000004 [ 2650.069854][ C1] RBP: 00007fe12119d1d0 R08: 0000000000000000 R09: 00007fe12119cf70 [ 2650.077805][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.085758][ C1] R13: 00007fffcd316aaf R14: 00007fe12119d300 R15: 0000000000022000 [ 2650.093714][ C1] ---[ end trace 3a4894fd838675af ]--- 07:25:17 executing program 5: bpf$MAP_CREATE(0x900000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8913, 0x0) [ 2650.199564][ C1] ------------[ cut here ]------------ [ 2650.205044][ C1] WARNING: CPU: 1 PID: 6732 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2650.215831][ C1] Modules linked in: [ 2650.219725][ C1] CPU: 1 PID: 6732 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2650.230393][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.240448][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2650.246444][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2650.266054][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2650.272124][ C1] RAX: ffffffff82eb2979 RBX: 0000000000000025 RCX: ffff8880945a3000 [ 2650.280115][ C1] RDX: 0000000080010001 RSI: 0000000000000025 RDI: 0000000000000001 [ 2650.288092][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2650.296071][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 2650.304036][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2650.312019][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2650.320967][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2650.327575][ C1] CR2: 0000001b30722000 CR3: 000000007f87b000 CR4: 00000000001506e0 [ 2650.335635][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2650.343610][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2650.351588][ C1] Call Trace: [ 2650.354908][ C1] [ 2650.357759][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2650.363581][ C1] __run_hrtimer+0x163/0x460 [ 2650.368184][ C1] ? __pv_queued_spin_lock_slowpath+0xd8/0x5c0 [ 2650.374358][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2650.379323][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2650.385231][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2650.390878][ C1] [ 2650.393800][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2650.399787][ C1] RIP: 0010:mm_update_next_owner+0x207/0x4e0 [ 2650.405788][ C1] Code: be 00 00 20 00 21 ee 31 ff e8 f5 63 18 00 b8 00 00 20 00 21 c5 75 6c 48 8d bb 28 03 00 00 e8 a0 f5 28 00 48 8b ab 28 03 00 00 <48> 8d 5d 10 48 89 df e8 0d 08 29 00 48 8b 6d 10 48 39 dd 74 4b 0f [ 2650.425399][ C1] RSP: 0018:ffffc9001884bd80 EFLAGS: 00000246 [ 2650.431499][ C1] RAX: ffff8880945a3ac0 RBX: ffff88803c035450 RCX: 0000000000000bb6 [ 2650.439477][ C1] RDX: 000188803c035778 RSI: 0000000000000000 RDI: ffff88803c035778 [ 2650.447442][ C1] RBP: ffff888043e3fa00 R08: 0000000000000000 R09: 000188803c03577f [ 2650.455427][ C1] R10: ffffffff88f36fc0 R11: 0000000000000200 R12: ffff8880945a3570 [ 2650.463411][ C1] R13: ffff88803c035000 R14: ffff88809aff3698 R15: ffff88809aff3300 [ 2650.471390][ C1] exit_mm+0x33c/0x430 [ 2650.475465][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2650.481302][ C1] ? taskstats_exit+0x334/0x730 [ 2650.486156][ C1] ? acct_collect+0x3a4/0x400 [ 2650.490837][ C1] do_exit+0x3ff/0x1670 [ 2650.494987][ C1] ? zap_other_threads+0x1c2/0x1e0 [ 2650.500095][ C1] do_group_exit+0x17d/0x180 [ 2650.504682][ C1] __do_sys_exit_group+0xb/0x10 [ 2650.509531][ C1] __se_sys_exit_group+0x5/0x10 [ 2650.514393][ C1] __x64_sys_exit_group+0x16/0x20 [ 2650.519420][ C1] do_syscall_64+0x39/0x80 [ 2650.523830][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2650.529733][ C1] RIP: 0033:0x465f69 [ 2650.533627][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2650.540463][ C1] RSP: 002b:00007ffe7ba89b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2650.548883][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000465f69 [ 2650.556864][ C1] RDX: 000000000041927b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 2650.564834][ C1] RBP: 0000000000000000 R08: 0000000000570330 R09: 0000000000000000 [ 2650.572815][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.580782][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7ba89c40 [ 2650.588759][ C1] ---[ end trace 3a4894fd838675b0 ]--- [ 2650.594582][ C1] ------------[ cut here ]------------ [ 2650.600028][ C1] WARNING: CPU: 1 PID: 6732 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2650.610802][ C1] Modules linked in: [ 2650.614685][ C1] CPU: 1 PID: 6732 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2650.624863][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2650.634928][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2650.640923][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2650.660556][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2650.666651][ C1] RAX: ffffffff82eb2979 RBX: 0000000000000017 RCX: ffff8880945a3000 [ 2650.674623][ C1] RDX: 0000000080010001 RSI: 0000000000000017 RDI: 0000000000000001 [ 2650.682591][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2650.690556][ C1] R10: 0001ffffffffffff R11: ffff8880945a3000 R12: ffff88813bd1da58 [ 2650.698525][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2650.706489][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2650.715411][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2650.722001][ C1] CR2: 0000001b30722000 CR3: 000000007f87b000 CR4: 00000000001506e0 [ 2650.729965][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2650.737946][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2650.745912][ C1] Call Trace: [ 2650.749181][ C1] [ 2650.752014][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2650.757818][ C1] __run_hrtimer+0x163/0x460 [ 2650.762423][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2650.768225][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2650.773158][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2650.779079][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2650.784709][ C1] [ 2650.787628][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2650.793648][ C1] RIP: 0010:mm_update_next_owner+0x207/0x4e0 [ 2650.799624][ C1] Code: be 00 00 20 00 21 ee 31 ff e8 f5 63 18 00 b8 00 00 20 00 21 c5 75 6c 48 8d bb 28 03 00 00 e8 a0 f5 28 00 48 8b ab 28 03 00 00 <48> 8d 5d 10 48 89 df e8 0d 08 29 00 48 8b 6d 10 48 39 dd 74 4b 0f [ 2650.819244][ C1] RSP: 0018:ffffc9001884bd80 EFLAGS: 00000246 [ 2650.825331][ C1] RAX: ffff8880945a3ac0 RBX: ffff88803c035450 RCX: 0000000000000bb6 [ 2650.833300][ C1] RDX: 000188803c035778 RSI: 0000000000000000 RDI: ffff88803c035778 [ 2650.841272][ C1] RBP: ffff888043e3fa00 R08: 0000000000000000 R09: 000188803c03577f [ 2650.849234][ C1] R10: ffffffff88f36fc0 R11: 0000000000000200 R12: ffff8880945a3570 [ 2650.857195][ C1] R13: ffff88803c035000 R14: ffff88809aff3698 R15: ffff88809aff3300 [ 2650.865178][ C1] exit_mm+0x33c/0x430 [ 2650.869242][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2650.875046][ C1] ? taskstats_exit+0x334/0x730 [ 2650.879894][ C1] ? acct_collect+0x3a4/0x400 [ 2650.884569][ C1] do_exit+0x3ff/0x1670 [ 2650.888720][ C1] ? zap_other_threads+0x1c2/0x1e0 [ 2650.893851][ C1] do_group_exit+0x17d/0x180 [ 2650.898437][ C1] __do_sys_exit_group+0xb/0x10 [ 2650.903283][ C1] __se_sys_exit_group+0x5/0x10 [ 2650.908203][ C1] __x64_sys_exit_group+0x16/0x20 [ 2650.913256][ C1] do_syscall_64+0x39/0x80 [ 2650.917683][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2650.923602][ C1] RIP: 0033:0x465f69 [ 2650.927488][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2650.934319][ C1] RSP: 002b:00007ffe7ba89b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2650.942744][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000465f69 [ 2650.950715][ C1] RDX: 000000000041927b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 2650.958681][ C1] RBP: 0000000000000000 R08: 0000000000570330 R09: 0000000000000000 [ 2650.966650][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2650.974620][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7ba89c40 [ 2650.982622][ C1] ---[ end trace 3a4894fd838675b1 ]--- [ 2650.988365][ C1] ------------[ cut here ]------------ [ 2650.993806][ C1] WARNING: CPU: 1 PID: 6732 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2651.004567][ C1] Modules linked in: [ 2651.008447][ C1] CPU: 1 PID: 6732 Comm: syz-executor.1 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2651.018513][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.028557][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2651.034556][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2651.054171][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2651.060236][ C1] RAX: ffffffff82eb2979 RBX: 0000000000000018 RCX: ffff8880945a3000 [ 2651.068199][ C1] RDX: 0000000080010001 RSI: 0000000000000018 RDI: 0000000000000001 [ 2651.076174][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2651.084136][ C1] R10: 0001ffffffffffff R11: ffff8880945a3000 R12: ffff88813bd1da58 [ 2651.092097][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2651.100062][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2651.108989][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2651.115583][ C1] CR2: 0000001b30722000 CR3: 000000007f87b000 CR4: 00000000001506e0 [ 2651.123581][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2651.131544][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2651.139554][ C1] Call Trace: [ 2651.143103][ C1] [ 2651.145938][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2651.151745][ C1] __run_hrtimer+0x163/0x460 [ 2651.156325][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2651.162146][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2651.167079][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2651.172967][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2651.178593][ C1] [ 2651.181513][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2651.187507][ C1] RIP: 0010:mm_update_next_owner+0x207/0x4e0 [ 2651.193512][ C1] Code: be 00 00 20 00 21 ee 31 ff e8 f5 63 18 00 b8 00 00 20 00 21 c5 75 6c 48 8d bb 28 03 00 00 e8 a0 f5 28 00 48 8b ab 28 03 00 00 <48> 8d 5d 10 48 89 df e8 0d 08 29 00 48 8b 6d 10 48 39 dd 74 4b 0f [ 2651.213137][ C1] RSP: 0018:ffffc9001884bd80 EFLAGS: 00000246 [ 2651.219220][ C1] RAX: ffff8880945a3ac0 RBX: ffff88803c035450 RCX: 0000000000000bb6 [ 2651.227196][ C1] RDX: 000188803c035778 RSI: 0000000000000000 RDI: ffff88803c035778 [ 2651.235168][ C1] RBP: ffff888043e3fa00 R08: 0000000000000000 R09: 000188803c03577f [ 2651.243152][ C1] R10: ffffffff88f36fc0 R11: 0000000000000200 R12: ffff8880945a3570 [ 2651.251136][ C1] R13: ffff88803c035000 R14: ffff88809aff3698 R15: ffff88809aff3300 [ 2651.259112][ C1] exit_mm+0x33c/0x430 [ 2651.263200][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2651.269005][ C1] ? taskstats_exit+0x334/0x730 [ 2651.273875][ C1] ? acct_collect+0x3a4/0x400 [ 2651.278569][ C1] do_exit+0x3ff/0x1670 [ 2651.282729][ C1] ? zap_other_threads+0x1c2/0x1e0 [ 2651.287835][ C1] do_group_exit+0x17d/0x180 [ 2651.292422][ C1] __do_sys_exit_group+0xb/0x10 [ 2651.297270][ C1] __se_sys_exit_group+0x5/0x10 [ 2651.302120][ C1] __x64_sys_exit_group+0x16/0x20 [ 2651.307162][ C1] do_syscall_64+0x39/0x80 [ 2651.311586][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2651.317493][ C1] RIP: 0033:0x465f69 [ 2651.321384][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2651.328231][ C1] RSP: 002b:00007ffe7ba89b48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2651.336662][ C1] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 0000000000465f69 [ 2651.344637][ C1] RDX: 000000000041927b RSI: ffffffffffffffbc RDI: 0000000000000000 07:25:18 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r0}, 0x10) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:18 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_vif\x00') [ 2651.352632][ C1] RBP: 0000000000000000 R08: 0000000000570330 R09: 0000000000000000 [ 2651.360621][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.368600][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe7ba89c40 [ 2651.376598][ C1] ---[ end trace 3a4894fd838675b2 ]--- 07:25:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8914, 0x0) 07:25:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xff00, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.482432][ C1] ------------[ cut here ]------------ [ 2651.487942][ C1] WARNING: CPU: 1 PID: 6755 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2651.498713][ C1] Modules linked in: [ 2651.502599][ C1] CPU: 1 PID: 6755 Comm: syz-executor.2 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2651.512661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.522733][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x2000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x6000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.528721][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2651.548335][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2651.554417][ C1] RAX: ffffffff82eb2979 RBX: 000000000000001e RCX: ffff88809a56a000 [ 2651.562411][ C1] RDX: 0000000080010001 RSI: 000000000000001e RDI: 0000000000000001 [ 2651.570379][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xe0ffffff, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.578350][ C1] R10: 0001ffffffffffff R11: ffffc90000d18ff8 R12: ffff88813bd1da58 [ 2651.586319][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2651.594292][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2651.603253][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2651.609841][ C1] CR2: 0000000000568000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 2651.617822][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfc000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:18 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfe800000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.625794][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2651.633778][ C1] Call Trace: [ 2651.637049][ C1] [ 2651.639891][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2651.645724][ C1] __run_hrtimer+0x163/0x460 [ 2651.650313][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2651.655251][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2651.661150][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2651.666781][ C1] [ 2651.669707][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2651.675698][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x59/0x60 [ 2651.681901][ C1] Code: f8 0a 00 00 83 fa 02 75 21 48 8b 91 00 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 66 0f 1f 44 00 00 4c 8b 04 24 65 48 8b 14 25 00 6d 01 00 65 8b [ 2651.701526][ C1] RSP: 0018:ffffc9001888f868 EFLAGS: 00000293 [ 2651.707593][ C1] RAX: ffffffff816484ed RBX: 0000000000000001 RCX: ffff88809a56a000 [ 2651.715562][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2651.723527][ C1] RBP: ffffc9001888f960 R08: ffffffff81648419 R09: 0001c9001888faf1 [ 2651.731510][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea00047ae480 [ 2651.740437][ C1] R13: ffff88809ae441c0 R14: ffff88809a6aac10 R15: 00007f3510f82000 [ 2651.748415][ C1] ? zap_pte_range+0x239/0x13f0 [ 2651.753277][ C1] ? zap_pte_range+0x30d/0x13f0 [ 2651.758186][ C1] zap_pte_range+0x30d/0x13f0 [ 2651.762868][ C1] ? __list_add_valid+0x28/0x90 [ 2651.767722][ C1] unmap_page_range+0x540/0x650 [ 2651.772569][ C1] unmap_single_vma+0x157/0x210 [ 2651.777411][ C1] unmap_vmas+0xc0/0x170 [ 2651.781636][ C1] exit_mmap+0x1be/0x400 [ 2651.785874][ C1] __mmput+0xa2/0x220 [ 2651.789848][ C1] mmput+0x3d/0x50 [ 2651.793572][ C1] exit_mm+0x344/0x430 [ 2651.797647][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2651.803435][ C1] ? taskstats_exit+0x334/0x730 [ 2651.808295][ C1] ? acct_collect+0x3a4/0x400 [ 2651.812991][ C1] do_exit+0x3ff/0x1670 [ 2651.817126][ C1] ? do_futex+0x1080/0x1cd0 [ 2651.821606][ C1] do_group_exit+0xce/0x180 [ 2651.826096][ C1] get_signal+0xdce/0x14e0 [ 2651.830504][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 2651.836057][ C1] ? __se_sys_futex+0x2a8/0x390 [ 2651.840904][ C1] ? do_user_addr_fault+0x751/0xc00 [ 2651.846100][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 2651.851652][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 2651.857262][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 2651.862703][ C1] do_syscall_64+0x45/0x80 [ 2651.867095][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2651.873001][ C1] RIP: 0033:0x465f69 [ 2651.876893][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2651.883727][ C1] RSP: 002b:00007f350fad6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2651.892132][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000465f69 [ 2651.900082][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 2651.908048][ C1] RBP: 000000000056bf60 R08: 0000000000000016 R09: 0000000000000000 [ 2651.916008][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000056bf6c [ 2651.923976][ C1] R13: 00007fffa140d77f R14: 00007f350fad6300 R15: 0000000000022000 07:25:19 executing program 5: bpf$MAP_CREATE(0xa00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfe80ffff, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.931945][ C1] ---[ end trace 3a4894fd838675b3 ]--- [ 2651.937762][ C1] ------------[ cut here ]------------ [ 2651.943225][ C1] WARNING: CPU: 1 PID: 6755 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2651.954001][ C1] Modules linked in: [ 2651.957886][ C1] CPU: 1 PID: 6755 Comm: syz-executor.2 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2651.967948][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2651.978005][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 07:25:19 executing program 0: ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000200)={0x6, 0x7fff, 0x85, &(0x7f0000000140)="0b28f4d0cebc3e788da391911a3d51497400ce3fb67b49b905704065d8a3b7deff44bd301a6000a38b8fa63ad5e501ad71c05533ebb1614c6e32c780ad509ed8122400d96e308d83cf529ea8869016ec8326658c770feb665bcba9572ee4cd764a4d03325382a51274fb80ea75f7b5489df90338d4a89b69e3756b42d3b1f2b5cccb8b6750"}) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0xb67d5c7a538998c0) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xa2, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={r2, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x8933, 0x0) 07:25:19 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfec0ffff, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) [ 2651.984025][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2652.003637][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2652.009709][ C1] RAX: ffffffff82eb2979 RBX: 000000000000001b RCX: ffff88809a56a000 [ 2652.017679][ C1] RDX: 0000000000010001 RSI: 000000000000001b RDI: 0000000000000001 [ 2652.025658][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2652.033627][ C1] R10: 0001ffffffffffff R11: ffff88809a56a000 R12: ffff88813bd1da58 [ 2652.041606][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2652.049605][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2652.058563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2652.065169][ C1] CR2: 0000000000568000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 2652.073124][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2652.081086][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2652.089055][ C1] Call Trace: [ 2652.092321][ C1] [ 2652.095150][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2652.100959][ C1] __run_hrtimer+0x163/0x460 [ 2652.105541][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2652.111355][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2652.116295][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2652.122180][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2652.127801][ C1] [ 2652.130714][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2652.136715][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x59/0x60 [ 2652.142891][ C1] Code: f8 0a 00 00 83 fa 02 75 21 48 8b 91 00 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 66 0f 1f 44 00 00 4c 8b 04 24 65 48 8b 14 25 00 6d 01 00 65 8b [ 2652.162504][ C1] RSP: 0018:ffffc9001888f868 EFLAGS: 00000293 [ 2652.168559][ C1] RAX: ffffffff816484ed RBX: 0000000000000001 RCX: ffff88809a56a000 [ 2652.176512][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2652.184494][ C1] RBP: ffffc9001888f960 R08: ffffffff81648419 R09: 0001c9001888faf1 [ 2652.192485][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea00047ae480 [ 2652.200487][ C1] R13: ffff88809ae441c0 R14: ffff88809a6aac10 R15: 00007f3510f82000 [ 2652.208439][ C1] ? zap_pte_range+0x239/0x13f0 [ 2652.213296][ C1] ? zap_pte_range+0x30d/0x13f0 [ 2652.218142][ C1] zap_pte_range+0x30d/0x13f0 [ 2652.222823][ C1] ? __list_add_valid+0x28/0x90 [ 2652.227656][ C1] unmap_page_range+0x540/0x650 [ 2652.232507][ C1] unmap_single_vma+0x157/0x210 [ 2652.237337][ C1] unmap_vmas+0xc0/0x170 [ 2652.241581][ C1] exit_mmap+0x1be/0x400 [ 2652.245862][ C1] __mmput+0xa2/0x220 [ 2652.249825][ C1] mmput+0x3d/0x50 [ 2652.253538][ C1] exit_mm+0x344/0x430 [ 2652.257601][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2652.263409][ C1] ? taskstats_exit+0x334/0x730 [ 2652.268254][ C1] ? acct_collect+0x3a4/0x400 [ 2652.272938][ C1] do_exit+0x3ff/0x1670 [ 2652.277095][ C1] ? do_futex+0x1080/0x1cd0 [ 2652.281583][ C1] do_group_exit+0xce/0x180 [ 2652.286071][ C1] get_signal+0xdce/0x14e0 [ 2652.290481][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 2652.296015][ C1] ? __se_sys_futex+0x2a8/0x390 [ 2652.300893][ C1] ? do_user_addr_fault+0x751/0xc00 [ 2652.306072][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 2652.311626][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 2652.317268][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 2652.322746][ C1] do_syscall_64+0x45/0x80 [ 2652.327150][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2652.333062][ C1] RIP: 0033:0x465f69 [ 2652.336950][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2652.343767][ C1] RSP: 002b:00007f350fad6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2652.352157][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000465f69 [ 2652.360107][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 2652.368066][ C1] RBP: 000000000056bf60 R08: 0000000000000016 R09: 0000000000000000 [ 2652.376033][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000056bf6c [ 2652.384023][ C1] R13: 00007fffa140d77f R14: 00007f350fad6300 R15: 0000000000022000 [ 2652.391993][ C1] ---[ end trace 3a4894fd838675b4 ]--- [ 2652.397658][ C1] ------------[ cut here ]------------ [ 2652.403109][ C1] WARNING: CPU: 1 PID: 6755 at drivers/gpu/drm/vkms/vkms_crtc.c:21 vkms_vblank_simulate+0x209/0x210 [ 2652.413874][ C1] Modules linked in: [ 2652.417747][ C1] CPU: 1 PID: 6755 Comm: syz-executor.2 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2652.427794][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2652.437831][ C1] RIP: 0010:vkms_vblank_simulate+0x209/0x210 [ 2652.443817][ C1] Code: 00 00 00 48 c7 c6 c0 54 92 86 31 c0 e8 00 43 f7 ff b8 01 00 00 00 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 17 07 5b fe <0f> 0b e9 5d fe ff ff 55 41 57 41 56 41 55 41 54 53 48 83 ec 28 48 [ 2652.463414][ C1] RSP: 0018:ffffc90000d18e18 EFLAGS: 00010046 [ 2652.469461][ C1] RAX: ffffffff82eb2979 RBX: 000000000000001c RCX: ffff88809a56a000 [ 2652.477424][ C1] RDX: 0000000000010001 RSI: 000000000000001c RDI: 0000000000000001 [ 2652.485405][ C1] RBP: ffff88813bd1da40 R08: ffffffff82eb27ce R09: 00018881025fd4bf [ 2652.493356][ C1] R10: 0001ffffffffffff R11: ffff88809a56a000 R12: ffff88813bd1da58 [ 2652.501305][ C1] R13: ffff88813bd1da40 R14: ffff8881025fc628 R15: 0000000000fe4c00 [ 2652.509268][ C1] FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 2652.518206][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2652.524780][ C1] CR2: 0000000000568000 CR3: 0000000007629000 CR4: 00000000001506e0 [ 2652.532730][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2652.540685][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2652.548641][ C1] Call Trace: [ 2652.551907][ C1] [ 2652.554775][ C1] ? vkms_get_vblank_timestamp+0x100/0x100 [ 2652.560579][ C1] __run_hrtimer+0x163/0x460 [ 2652.565152][ C1] ? clockevents_program_event+0x19c/0x1e0 [ 2652.570969][ C1] hrtimer_interrupt+0x380/0xaf0 [ 2652.575899][ C1] __sysvec_apic_timer_interrupt+0x6f/0x200 [ 2652.581788][ C1] sysvec_apic_timer_interrupt+0x69/0x80 [ 2652.587402][ C1] [ 2652.590312][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2652.596293][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x59/0x60 [ 2652.602426][ C1] Code: f8 0a 00 00 83 fa 02 75 21 48 8b 91 00 0b 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 0a 00 00 48 39 cf 73 08 48 89 44 f2 08 48 89 3a 66 0f 1f 44 00 00 4c 8b 04 24 65 48 8b 14 25 00 6d 01 00 65 8b [ 2652.622017][ C1] RSP: 0018:ffffc9001888f868 EFLAGS: 00000293 [ 2652.628081][ C1] RAX: ffffffff816484ed RBX: 0000000000000001 RCX: ffff88809a56a000 [ 2652.636061][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 2652.644030][ C1] RBP: ffffc9001888f960 R08: ffffffff81648419 R09: 0001c9001888faf1 [ 2652.652001][ C1] R10: 0001ffffffffffff R11: 0000000000000200 R12: ffffea00047ae480 [ 2652.659950][ C1] R13: ffff88809ae441c0 R14: ffff88809a6aac10 R15: 00007f3510f82000 [ 2652.667920][ C1] ? zap_pte_range+0x239/0x13f0 [ 2652.672791][ C1] ? zap_pte_range+0x30d/0x13f0 [ 2652.677655][ C1] zap_pte_range+0x30d/0x13f0 [ 2652.682327][ C1] ? __list_add_valid+0x28/0x90 [ 2652.687164][ C1] unmap_page_range+0x540/0x650 [ 2652.692010][ C1] unmap_single_vma+0x157/0x210 [ 2652.696852][ C1] unmap_vmas+0xc0/0x170 [ 2652.701077][ C1] exit_mmap+0x1be/0x400 [ 2652.705314][ C1] __mmput+0xa2/0x220 [ 2652.709297][ C1] mmput+0x3d/0x50 [ 2652.713010][ C1] exit_mm+0x344/0x430 [ 2652.717072][ C1] ? _raw_spin_unlock_irqrestore+0x27/0x50 [ 2652.722869][ C1] ? taskstats_exit+0x334/0x730 [ 2652.727723][ C1] ? acct_collect+0x3a4/0x400 [ 2652.732383][ C1] do_exit+0x3ff/0x1670 [ 2652.736534][ C1] ? do_futex+0x1080/0x1cd0 [ 2652.741028][ C1] do_group_exit+0xce/0x180 [ 2652.745534][ C1] get_signal+0xdce/0x14e0 [ 2652.749965][ C1] arch_do_signal_or_restart+0x2a/0x270 [ 2652.755494][ C1] ? __se_sys_futex+0x2a8/0x390 [ 2652.760328][ C1] ? do_user_addr_fault+0x751/0xc00 [ 2652.765506][ C1] ? __fpregs_load_activate+0x103/0x1f0 [ 2652.771031][ C1] exit_to_user_mode_prepare+0x11a/0x1b0 [ 2652.776658][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 2652.782112][ C1] do_syscall_64+0x45/0x80 [ 2652.786526][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2652.792448][ C1] RIP: 0033:0x465f69 [ 2652.796348][ C1] Code: Unable to access opcode bytes at RIP 0x465f3f. [ 2652.803166][ C1] RSP: 002b:00007f350fad6218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2652.811581][ C1] RAX: 0000000000000001 RBX: 000000000056bf68 RCX: 0000000000465f69 [ 2652.820762][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 000000000056bf6c [ 2652.828714][ C1] RBP: 000000000056bf60 R08: 0000000000000016 R09: 0000000000000000 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xd]}, 0x40) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0x8000, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f00000003c0)=""/189, 0x200000, 0x0, 0x1}, 0x20) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00', r1) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x0) sendmsg$alg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000008c0)="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", 0x177}, {&(0x7f0000000300)="0c9c7d134622a09bbcd692fabad5dfed84c0e3059e862033d9b5c4beeb3c795f0abbd3bfe47b8e000000", 0x2a}, {&(0x7f0000000340)="616c21bcf8da149f56e230e5f5213233", 0x10}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x100, 0x4008040}, 0x400c1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="020026bd70000900df250100000014002000fc020000000000000000000000070003000000050012000900000006001d00b8330000ed86ec619e19e0aaf31ca35741e7a2f623edc187713bf70c93f0aff9e4336bf118a828c8935f6500bda26a84b93b2263507044875b"], 0x48}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000810) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2={0xfc, 0x2, [], 0x1}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004010}, 0x4000) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448c9, 0x0) [ 2652.836663][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 000000000056bf6c [ 2652.844609][ C1] R13: 00007fffa140d77f R14: 00007f350fad6300 R15: 0000000000022000 [ 2652.852580][ C1] ---[ end trace 3a4894fd838675b5 ]--- 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400448dd, 0x0) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xe]}, 0x40) 07:25:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000000)=""/16, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:20 executing program 5: bpf$MAP_CREATE(0xb00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x400454ca, 0x0) 07:25:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xff000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0xf]}, 0x40) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40049409, 0x0) 07:25:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x200000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x40186366, 0x0) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4020940d, 0x0) 07:25:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffa, 0x400) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x680c2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x101, 0xe0000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) 07:25:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xffff80fe, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x80086301, 0x0) 07:25:20 executing program 5: bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x10]}, 0x40) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:25:20 executing program 5: bpf$MAP_CREATE(0xd00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0045878, 0x0) 07:25:20 executing program 5: bpf$MAP_CREATE(0xe00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0xaa01) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:20 executing program 5: bpf$MAP_CREATE(0xf00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000040)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4) 07:25:20 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x440, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0xf00, 0x8, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x4}, 0x40) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x400040, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000180)) 07:25:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xffffc0fe, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x11]}, 0x40) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x884}, 0x40) syz_open_procfs(r0, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000080)='fd/3\x00') 07:25:20 executing program 5: bpf$MAP_CREATE(0x1000000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc0189436, 0x0) 07:25:20 executing program 5: bpf$MAP_CREATE(0x1100000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x12]}, 0x40) 07:25:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc020660b, 0x0) 07:25:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xffffffe0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:20 executing program 5: bpf$MAP_CREATE(0x1200000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:20 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x13]}, 0x40) 07:25:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f00000000c0)) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x181100) socket$inet6_udp(0xa, 0x2, 0x0) 07:25:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x200000000000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:20 executing program 4: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9c0, 0x10b000) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x800) 07:25:20 executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1, "b6e32a", "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"}}, 0x110) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1300000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x14]}, 0x40) 07:25:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101280) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1400000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x600000000000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1500000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xc01, 0x222000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000005c0)={0x0, 0x0, r0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000400)}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000480)={0x8, 0x120, 0xfa00, {0x3, {0x3f, 0xa7a4, "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", 0x4, 0x1, 0xff, 0x80, 0x5, 0x1, 0x7}}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r5, 0x1}}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r5, r6}}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1600000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x15]}, 0x40) 07:25:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0xa00, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xe0ffffff00000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x567af188d3262ebc}}, 0x20) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x802, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r3, r4}}, 0x18) 07:25:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x180000000000000, 0x761d02) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000010c0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000001100)={r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$IMHOLD_L1(r5, 0x80044948, &(0x7f0000000040)=0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000001140)={r3}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$qrtrtun(r4, &(0x7f00000000c0)="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", 0x1000) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x16]}, 0x40) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1700000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000000, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 07:25:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffffffffff7ffffc, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r1 = getpid() syz_open_procfs(r1, 0x0) gettid() fork() r2 = getpid() ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) syz_open_procfs(r2, 0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/dev_mcast\x00') 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfc00000000000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x17]}, 0x40) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1800000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfe80000000000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x781}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbf3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c806}, 0x4000) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x18]}, 0x40) 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfe80ffff00000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x428000) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000040)=0x1) 07:25:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/nf_conntrack\x00') 07:25:21 executing program 5: bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x19]}, 0x40) 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xfec0ffff00000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000000)=0x1) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x101100) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x1ca02, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='maps\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x2) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000040)=0xffffffff, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x5, 0x0, 0x28}, 0x10) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1a00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0xff00000000000000, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1a]}, 0x40) 07:25:21 executing program 3: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000240)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x200801) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000018c0)={'ip_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x28, 0x80a8, 0xffffffff, 0x3ff, {{0x1c, 0x4, 0x0, 0x22, 0x70, 0x65, 0x0, 0x20, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0x25, [@remote, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}]}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x7, 0x11, "a9b84f11579fca7738b6df32943b54"}, {0x2, 0xa, "4e52782d22a87741"}, {0x6, 0xa, "30304048a7c47c47"}, {0x7, 0xe, "8b9505bb4c73fe4c624ce3c6"}, {0x6, 0xe, "60657913b66793b858889748"}]}]}}}}}) connect$can_j1939(r3, &(0x7f0000001900)={0x1d, r4, 0x0, {0x2, 0x0, 0x4}, 0xfd}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f0000000100)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={0x0, 0x0}) keyctl$update(0x2, 0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, 0x0) keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000200)={r6}) 07:25:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpid() syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0x2, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:21 executing program 5: bpf$MAP_CREATE(0x1b00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:21 executing program 0: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000340)=""/122, 0x7a}], 0x6, &(0x7f0000000440)=""/221, 0xdd}, 0x40000000) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000580)={0x9, 0x8, 0x3, 0xe0d6}) 07:25:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x81, 0x200200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) 07:25:21 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1b]}, 0x40) 07:25:21 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x40c1, 0x1, "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", 0x7f, 0x4, 0x80, 0x7, 0x5, 0x3e, 0x7}}}, 0x128) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:21 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 5: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1c]}, 0x40) 07:25:22 executing program 5: bpf$MAP_CREATE(0x1d00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)={r2}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x7734680c0a4bc8a) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000180)={r2}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)={0xa, &(0x7f00000000c0)=[{0x1, 0x45, 0x7, 0x7}, {0x200, 0xa0, 0x8, 0x81}, {0x8ba8, 0x6, 0x40, 0xa1fe}, {0x3, 0x6, 0x1, 0x5}, {0x1f, 0xbe, 0x6, 0x5}, {0xfffb, 0xf6, 0x5}, {0x2, 0x1, 0x0, 0x4}, {0x36, 0x3f, 0x3, 0x2}, {0x101, 0x9, 0x66, 0xffffffff}, {0x58f0, 0x1, 0xe0, 0x7}]}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000280), &(0x7f0000000240)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x1) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1d]}, 0x40) 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x402000, 0x0) 07:25:22 executing program 5: bpf$MAP_CREATE(0x1e00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000400)={0x9, 0x108, 0xfa00, {r2, 0x5, "b8bc3f", "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"}}, 0x110) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r3 = getpid() syz_open_procfs(r3, 0x0) syz_open_procfs(r3, &(0x7f0000000200)='children\x00') 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x2, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x1e]}, 0x40) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:22 executing program 4: getpgrp(0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:22 executing program 5: bpf$MAP_CREATE(0x1f00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x21]}, 0x40) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) socket$inet_udp(0x2, 0x2, 0x0) 07:25:22 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x80641) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x6, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x89, 0x244a40) getegid() socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 07:25:22 executing program 5: bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x22]}, 0x40) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000400)={0x6, 0x118, 0xfa00, {{0x81, 0x3, "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", 0xfb, 0x4, 0xff, 0x0, 0x1f, 0x1, 0x4, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0xfffffffc, 0x1, "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", 0xd6, 0x1, 0x32, 0xf7, 0x94, 0x5, 0x2f}, r2}}, 0x120) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfc, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0xc00) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x200800) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x23]}, 0x40) 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x600, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 5: bpf$MAP_CREATE(0x2100000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r2}) 07:25:22 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) 07:25:22 executing program 5: bpf$MAP_CREATE(0x2200000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x4440) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) 07:25:22 executing program 4: write$vhost_msg(0xffffffffffffffff, &(0x7f0000001140)={0x1, {&(0x7f00000000c0)=""/101, 0x65, &(0x7f0000000140)=""/4096, 0x1, 0x1}}, 0x48) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x80fe, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:22 executing program 0: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r0, r0) add_key$fscrypt_provisioning(&(0x7f0000000100)='fscrypt-provisioning\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)={0x3, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, r0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x4201) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:22 executing program 5: bpf$MAP_CREATE(0x2300000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 07:25:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2040) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:22 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1270, 0x0, 0x0, 0x0, @in6={0xa, 0x4, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd8ff}, @in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, [], 0x1}, 0xc3}}}, 0x118) 07:25:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfc00, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:22 executing program 5: bpf$MAP_CREATE(0x4e00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sched\x00') connect$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x2, 0x2}, 0xfd}, 0x18) 07:25:22 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x1) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = fork() r2 = syz_open_procfs(r1, &(0x7f00000002c0)='task\x00') ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x165951ec5142c45f, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) read$qrtrtun(0xffffffffffffffff, &(0x7f0000001980)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r5, 0x7}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001840)={'erspan0\x00', &(0x7f00000017c0)={'syztnl1\x00', 0x0, 0x11, 0x8000, 0x6, 0x5, {{0xa, 0x4, 0x1, 0x2e, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @multicast2, {[@generic={0x83, 0x3, '^'}, @generic={0x86, 0xf, "eefa53bf157a7b34f7095e505f"}]}}}}}) r7 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x7, 0xa, &(0x7f0000000300)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0xa, 0x4, 0xffffffffffffffc0, 0x8}, @alu={0x7, 0x1, 0xc, 0xb, 0xa, 0x4, 0x8}, @ldst={0x1, 0x2, 0x1, 0x7, 0x2, 0xfffffffffffffff4, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xd}], &(0x7f0000000380)='GPL\x00', 0xc85c, 0x32, &(0x7f00000003c0)=""/50, 0x40f00, 0x14, [], r6, 0x1, r7, 0x8, &(0x7f0000001880)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x1, 0x6, 0x3, 0x1}, 0x10, 0x0, r2}, 0x78) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) r9 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, 0x0, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r10, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r11}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000440)={0x1, 0x10, 0xfa00, {&(0x7f0000000400), r11}}, 0x18) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfe80, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5200000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5300000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xff00, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fstat(r0, &(0x7f00000000c0)) 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x5) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x5a3040, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2080) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) r2 = fork() r3 = syz_open_procfs(r2, &(0x7f00000001c0)='net/llc/socket\x00') ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5201) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c02, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) read$qrtrtun(r5, &(0x7f0000000040)=""/236, 0xec) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5400000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40, 0x101) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES64], 0xf0}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x40, 0x2244c0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5500000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x4005) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x165951ec5142c45f}) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x8, 0x270140) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000140)={r2}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200080, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x6, "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", 0x1f, 0x51, 0x25, 0x5, 0x74, 0x7f, 0xdc}}}, 0x128) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x9, 0x8, 0x7f, 0x3f}, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000000)) 07:25:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:23 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x446400) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:23 executing program 5: bpf$MAP_CREATE(0x5600000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:23 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "79aff4de05c1bcb66a0d86582fec9c262daea75adf486b82846983dd92bb19128d3720e7364868ef148ffaa220ecc9dae74b9f0d00a153b59ebe805c596c0b2d3b02157cd4e92d15ebe897c1018b188622af16eef51467e51188ac0aad91ef5c526fc803851ede7a30497cde33b785c64644feaafb824c09a09aa2479535d5d7bfbdecea12db1489dafd2f799a9bf6fce2df9f8aaf0c7e767315a44edb003a61cb1283c8addb7141dbd33f059bee4d11d8a2673974ae15c9282fa5ea1978dfb0b374db4941ab59f86144e80373c2431d5ac800b38170ba7333f9838e5d7e24a476143025c350cfe63f7a195c2164181e18aa32e153f034fe0b89b3e9e55c6b98", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r4, 0x3}}, 0x18) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0x4c02, 0x0) 07:25:23 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) gettid() r0 = getpid() syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/sockstat\x00') r1 = gettid() getpgrp(r1) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5700000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x4a0b42) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000002480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002440)={&(0x7f0000004c80)={0x230c, 0x13, 0x1, 0x70bd2c, 0x25dfdbfe, {0x25, 0x1, 0x4, 0x0, {0x4e23, 0x4e22, [0x8, 0x5, 0x6, 0x7], [0x5, 0x1, 0x5], 0x0, [0x8966, 0x7fffffff]}, 0x0, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "bedfb903b9d39752c756e5d08e0e7b01ae86db58df82799d99d0a0b707d4835129ad9b94c4f12db7b849b1250924ad7af1d58a675a4283b2e41f46d48b5aa631603f813d9cb4d1e3514f6ebab5677cefe1d2e679ceebe39958f1645dd91606f04f0ee3ba3e0db440fbc3f7fae4a210cc172afd6a4222236c9a202d6c4a8426"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "bc8dc524715416bd7adee5cf7e40d16c978ddda9be3e6a7d11a5ddf538560f5bd8afc2f5b1d670ce2c4829761b6c554411ae336f147163c842c5ea33ecee6c9b90c3f0cfd2dd334cb3a8a088530be1c69a886b553869d88fa03d40b83ac715cb386fd354c8421efd3d11542289c8ab2240061a194536f184351fafc50c5da59eacdac0988ba6d8164e3596829c23fd49e382c8d33d36f3c6c7e44d7a2a373137fff3ef0882973fc14bba87ecd0b1d0169b7a2dcf392a93b6c5989a85f9363bcc933abfa88f3d3f2437132031ab0dd2011cafab4a2d47740bb44acdb633aff887c7a0e9e0ca4e2fa6b313"}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "ea9f1736cd3b7742f1f808d11562339262a35f85d106cb40b238ecfad269aace377cdfe53a9d2c3486f64395721b1a5e3b3670f06041457cc620c91252b692045792"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x46, 0x1, "ed8b97e12d9f20752fe029f31fe5f9f06e746aebbda15012f39a713a0441858c51f92b98b88c0574b7b30a5054829802dd0b0c5891367cd76852338d646e64142be5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "81a203650189c49dbcd2c2f0f4359e9b69b4a36a6072d95e735e85f208aaf72f9216bef59c0c4bd1d478fddd7b9b172989edcc224d3074656d917273716c02b519e964685ce526d159c7e28993d7697516838b1ba8371c940d8b38b1925bc82e73fcf74564749bf5bf71caef994b5656f1ca25d3a0f6f7e3503684a7f94b8f6c0a09b85235f83f1c74bc5bb3db7fd4f7c3678cae9138ef59abe2"}]}, 0xfffffffffffffd19}, 0x1, 0x0, 0x0, 0x71}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000024c0)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000002500)={r1}, 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000002540)) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x1d, 0x6, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002840)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="7379ffffffff01000000011509000000000000fee99af7af025d7c1bb4", @ANYRES32=0x0, @ANYBLOB="000700400000026f00001728462000180065000001049078ffffffffffffffff00000000"]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002900)={'syztnl0\x00', &(0x7f0000002880)={'syztnl0\x00', r5, 0x29, 0x0, 0x9, 0x1000, 0xa0, @empty, @private0={0xfc, 0x0, [], 0x1}, 0x8, 0x80, 0x0, 0x400}}) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000027c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000002580)=[{0x30, 0x0, [0x80000001, 0x2f01, 0x10000, 0x3, 0x9, 0x8, 0x5, 0x14f9, 0x101, 0x3957, 0x8, 0x80, 0x4, 0xb0d3, 0x4]}, {0x10, 0x0, [0x8001, 0x9, 0x3, 0x80000000, 0x5c, 0xfffffffe, 0x6, 0x2, 0x5d, 0x7, 0x0, 0x9, 0x4, 0x7, 0x6, 0x5]}, {0x0, 0x0, [0x7fff, 0x8001, 0xffffff39, 0x8, 0x90, 0x3, 0x0, 0x3ff, 0x4, 0xff, 0x0, 0x8001, 0xff000000, 0x4a, 0x1, 0x4]}, {0x31, 0x0, [0x486, 0x1, 0x5, 0x0, 0x1f, 0x9, 0x4, 0x4, 0x6, 0x9, 0x6, 0x6, 0x80000000, 0xfffffff7, 0xf4d]}, {0x2, 0x0, [0x2, 0x1, 0x12, 0x0, 0x2, 0x2, 0x100, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x8, 0x8, 0xffffffff, 0x59f0]}, {0xa, 0x0, [0x3, 0x2, 0x9, 0x4, 0x2000, 0x0, 0x6, 0x9, 0x6, 0x5, 0x0, 0x12000, 0x0, 0x5, 0x10000, 0x4]}, {0x30, 0x0, [0x8, 0x8, 0x7f, 0x7, 0x0, 0x5, 0xffffff00, 0x7, 0x7, 0x2, 0xfffffffd, 0x99, 0xffff, 0x5, 0xff, 0x5]}, {0x28, 0x0, [0xfff, 0x2, 0x3, 0x9, 0x3ff, 0x9, 0x800, 0x7, 0x57, 0x60, 0x8, 0x9, 0xaf, 0x3, 0x4, 0x4]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfc, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5800000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5803000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x105882) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x303081, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000000c0)) 07:25:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x8c801) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x840) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000300)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/mcfilter6\x00') r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000340)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000380)={r6}) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x3, {0xfff, 0x8, "a6ddf47be86e2365bd55068287e54bbcafb524901653ee5542bf3b29949e6ad91333e43b7c8c878536c6786fc3873437ad8bb2de1b0e0f6278cabd3f66330c913d12b74eaf12f3060a71fb3009fc2c62230cb23a34a5e810dc96e0cf60e5555e4ec8c2a5feec0eb4e5d7730b1c7320b973f520d2b7f40a73ef8aecd7193ee49a365381351ef200f36e67f97d39177ce429b07bb8e1a1a6a217b0543b1941589424e8a39e6a992fb83810a129ff2a220ad7c2c71305bc650f9f8342e701f80d903d338165ccf1630c44ad7b1a1cde8a8a6041b78029e30008f406b38d602f8c8a2ac58ad64e3c210cede1d21c3a77b0e63d5160cf760f1a11dd037c0bbe59260f", 0xff, 0x80, 0x40, 0x0, 0x9, 0x5, 0x1, 0x1}, r3}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x4e20, 0x7ff, @empty, 0x1000}, r7}}, 0x38) 07:25:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x600, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:23 executing program 0: keyctl$describe(0x6, 0x0, &(0x7f00000000c0)=""/123, 0x7b) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x18000000, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:23 executing program 5: bpf$MAP_CREATE(0x5900000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x302, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r1, 0xb}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = getpid() r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x24202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000200)) syz_open_procfs(r4, 0x0) syz_open_procfs(r4, &(0x7f0000000100)='attr/fscreate\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$BLKRRPART(r6, 0x125f, 0x0) r7 = getpgrp(r4) syz_open_procfs(r7, &(0x7f0000000140)='net/arp\x00') 07:25:24 executing program 5: bpf$MAP_CREATE(0x7003000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x80fe, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x42280) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) 07:25:24 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0xa, 0x4}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x3, @local}}}, 0x38) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r5, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r5}}, 0x18) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rfcomm\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000001c0)=0x383450) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 07:25:24 executing program 5: bpf$MAP_CREATE(0x7801000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001340)='net/bnep\x00') sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001680)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f00000013c0)={0x270, 0x13, 0x200, 0x70bd29, 0x25dfdbff, {0x22, 0x1, 0x2, 0x80, {0x4e24, 0x4e22, [0xa3, 0x7f, 0x2, 0x6], [0x7ff, 0x9, 0x1a54, 0x81], 0x0, [0x44a, 0x6]}, 0x0, 0x101}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "1363a36386e524"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "d137f984539bd30a"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "b753df7b7b2c82"}, @INET_DIAG_REQ_BYTECODE={0x29, 0x1, "d463c0904514dc4c73243a1cace971484ad6911f09a89c017321fce32b1d941cfa236502d8"}, @INET_DIAG_REQ_BYTECODE={0xee, 0x1, "92c3c71883ae44963b1c5a9e94b086dbdd75d8469def9904f7a6fa8db8e17b2266ca895efeba6eea00010000f8df9e11dda512728669b5cb54526ccac32206f2c78a4b7260043d0278d98fb9e5013d9a215ab679862c9322c2964ca8e41e4709d1a717243b39c84d31031bb746ce96faef1476cab5ffa5fcfdc48c7b2d862e3d847fe8e3c45cbbefb770aaffca2b774802049403b628e629925415e650cfbd970fdcdfb255c90c924f0f59eea60115ef9ef8d4a539e5c0ffd0d77b05e62c69d0ef827aa8b297bde6c48346ad4a12b93691e7c27efc18427a728c7879e577a211c252591b33bd00000000"}, @INET_DIAG_REQ_BYTECODE={0x6f, 0x1, "a69b7e3263a69b489bac8918e33a34eca9d46eca05a7e0c59c1457292356b55acd75ec0350b9daba269d673e774cab69a16de7a08b05e9196eb4078dabe5027ed471a4e9fc0537803a15a27e37011f905cbed056648366295f22c8d64419d23c2e62f5c2cd8c3f556b7cf5"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "fc5ad81eaa3cddb4851d567a51a10a5f983938b64ed1b34e8575af2cc4ac8fc2e1594e2bf6ab782e2b28d025e4079623c5c12d818edd456c7e8a203d7b4161c28adb76d90a5adf50fa372d6d79b38273c96fae36f53d5631403d57595319e375f5dfd42b1eeb1bb905384a0beca1d2"}]}, 0x270}, 0x1, 0x0, 0x0, 0x90}, 0x80) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfc00, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000fde7a89b5ad731aeb47cb57f514d44619b292830e1ac1ebb08d3c2b330a310a754", @ANYRES16=r0, @ANYBLOB="8107000000000000000001000000"], 0x14}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002540)='/dev/cachefiles\x00', 0x200, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2a, 0x25dfdbf9, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x20040000) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r6 = fork() syz_open_procfs(r6, &(0x7f00000003c0)='net/vlan/vlan0\x00') socket$inet_udp(0x2, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000540)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r7, 0x1}}, 0x18) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000025c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000129bddbdf25010000020600030003000000080017000000000aa46984e8314a6705f29d3bba6a9c3716ba8afdc6a72fddb6dbb810fd23a588917416b59dae4f400dcff93082db4d494bcf2595b14d413595e1f4c23cd03b9e2372a5a7eddff9fb33284f6cb34cc3aefd2cf3a8e5c9f8ef42a278297c549e2f53e5b6", @ANYRES32=r2, @ANYBLOB="06000200010000000500220000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1f48201c7b55a0e6}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0x4c02, 0x0) 07:25:24 executing program 5: bpf$MAP_CREATE(0x7f00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x8102) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfe80, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 07:25:24 executing program 5: bpf$MAP_CREATE(0x7f01000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 07:25:24 executing program 5: bpf$MAP_CREATE(0x7f02000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x88201) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff00, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x7, 0x800) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000001c0)={r4}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000002e80)={'syztnl1\x00', &(0x7f0000002e00)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1f, 0x46a2, 0x6a, @private1, @loopback, 0x20, 0x7800}}) bind$can_j1939(r0, &(0x7f0000002ec0)={0x1d, r5, 0x3, {}, 0x1}, 0x18) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x3cd429627cfcd1c, 0x0) write$ppp(r6, &(0x7f00000008c0)="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", 0x1000) 07:25:24 executing program 5: bpf$MAP_CREATE(0x7f03000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r0, 0xf}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x165951ec5142c45f}) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 07:25:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x405000, 0x0) 07:25:24 executing program 5: bpf$MAP_CREATE(0x8000000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x2000000, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x7fff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x3, 0xa60000, "e5ce283b7e9ce0da32cb17869ba2822b1fbc33f4b3598c020b296bc559d6216cf39b1cccd9415ec13f272c5985bde766c8b2b3966bd2726579269fdede0ebe4902a1f64a992c8714f4a1215107eb98d7650c7755f6115a337cabe7e4282bf0af05582e135cdc7f03476a49300ce5e5b6c353d8b0fb280e8441424c0affe42baed22046c47a8ffea8d1ea6cca8daf4f71325c89c08ef00cfe75804e3177e02ae167b4af972496b361d01306e3baf3808483ec0b59b8933fc4ef96a53f3024247a856b7b8b3f7022e2900dbeba044cd361eac2fa1cdf0d2cf72d1cdbb500860034e488fb8b88d1e99866a27cfd645580ecbd1e313df0762510ef47377baeae4f08", 0x99, 0x9, 0x9, 0x3, 0x20, 0x9, 0x7}}}, 0x120) 07:25:24 executing program 5: bpf$MAP_CREATE(0x8001000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='attr/fscreate\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x6000000, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x208100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:24 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x400400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x8824, 0x4) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 07:25:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x121400) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xe0ffffff, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 5: bpf$MAP_CREATE(0x8002000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 4: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000040)={0x80, 0x6669, 0x3, 0x9}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:24 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/stat\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e1d, 0xffbfffd9, @empty, 0x7f9}}}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x480000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0x4c02, 0x0) ustat(0xf706, &(0x7f0000000080)) 07:25:24 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0x7f, 0x38eaa746, "9fdea04f3fff364111e76d6b423a337f1bbc6bc9400f0af4e416394976b6a4e7a9cf314687e382533ecb02c09e5b6434432a4b89cfc3085a4c096cb0a9a8b34f2f0e52daa105d2af6539979ca5ad039c977d120d97928787b74978f6991db70f27a9f179fb1b6ab7a77f347e03c8972c040c2bd3c3ecf0b211de1ecf119c5ad2d30eacc38705829d2a7bed50598f4b75a4b29935f9a4513ff6098078c551b7e5a18fe03405edd553fe4390e122f9b56c7f418889d8c6ff01d291d1a43e6de68150905d924e9b52f7b707a592bfe94bf0057f65aaf4ee5ad15fb9663f66696030ff0b36ba6430f363df3192a10f266d1de8606b2c64f05217c99bcb40a31c064a", 0x81, 0x9, 0x3, 0x8, 0x7, 0x9c}, r2}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0x6e, "a05741", "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"}}, 0x110) 07:25:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 07:25:24 executing program 5: bpf$MAP_CREATE(0x8003000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfc000000, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:24 executing program 4: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x280000) r0 = getpid() syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000080)='net/mcfilter6\x00') 07:25:24 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2c, 0x7, 0x0, 0x1e}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000080)="6c25410ec3f8d6578d745909798c05ad3b7f12e3e1caa49baa893abf68837ce14edc6159a0dc664961e507b7473a219f43aec0cf735b6c293d53df2ed427ec91e667fa5b039c4ab62bef76717d0e4f15e328297c7fc89389231ff7423eb8f4764f5e7fe209f2ab5195bf3610a4ca5253c26d7f89ed081ce9cee84d4de9d88dc308dba0bb47aebb9e5a0d453ffb8547d839c6ac5c4e4cf5a9ad9c378fbe9e944c6ccdebbac451810b6025567a9b18125d", 0xb0}, {&(0x7f0000000140)="9f94982764ed5743d1f859384011f0edaf6c8ae19cd16d5c0266fc318b90b475bb4501c5f5f5a481e27982664a8569c53c438b5130f7a1d06c2911194ca68ae67e53ff2e465c64fed25916443f65d1fe716dd9e5f56543ef6726abc6b3315837c2eb800b33c2f09e4328aac30516ffa45267f6f8ce6e70f9b91b1c6222f4f31592", 0x81}, {&(0x7f0000000200)="8e26bc036479e7919a2b54d1b6a08d43dd920645beec4b3cc327bab3f7f34af743c428d2afb94881f1993e6beaeb5382db17b8683b8b29092675c749b779cc5e54d5e23862063b561d9a97d3e3bd7d76ffb9acfc13feb1d44e3b5ff597c460ce607d8f771bdc58f9918a210feb182e143d529f3f807b9866abfa534addf4b8b60b4fb7cf421923539cc6", 0x8a}, {&(0x7f00000002c0)="3f3f9b03f97cb989e1b3fe4e632d61ad4fe36f0b812110da7553a7861bcd87d4295b16a7c8d127b3dcd03ba7e88a148cd4b6e179327553ada048c6f9954b02123db68512ecc1982c6961dc5be5000c8ce98c5a87db0ce45cb2afad8d731825fdd93fa83b7b5c87af09908d0b3c3e5271609c1aa5cb1e99b7d2aa77c443e97b2de93125d0be36ccf7f53731bab8303e7f", 0x90}, {&(0x7f0000000380)="8b7bb5dffc56e4fba9e969c977f0caa184b81d324b3bbff6bd71ac224db490ee2d655178d1be080b5703d720ea93e015c039dd9a809c27db9acb5a67463f2aa6b45399dbd13aea43bbb536baf9330f16fa50f401f4292b6edcbab39e8fb3abb7375c4ae27e39700eb6097a3653cf9f094bcb86c8740c6c76160a45d133995b286aec47c9a3616e77072903e9a85c0b82ca19c6610b60bd2ce04dc72ad6211e05c344ff60e651701ca775d344d8dd55c1419f89f0efc5b2a5430116ea96aa651b72692f939086a2a1ee4cd2b07917ca292cf4380f4b59e33b3d42e9", 0xdb}, {&(0x7f0000000480)="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", 0xfe}, {&(0x7f0000000580)="d6aa4e0413859e006a560bc9bdfdc61546fd6e07b01bd16d16c39d898d504cdf2cff889a492c0b90e68c69503ca486b12a6443cde97387ea955d9698438b39b4ec064db4c7ceb654aa0b45271e04f39f3678c0fc0769ea840a024b0f875f265e52297b3715dd3e65e56ee9c74653b3a0ef2d734833374b98e87a362d1d913caf0e83ee9a95aeac", 0x87}], 0x7, 0x0, 0x0, 0x8040}, 0x41) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5404f580, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) 07:25:25 executing program 5: bpf$MAP_CREATE(0x8008000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) 07:25:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x30, r0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0xffffffffffffffe7, &(0x7f0000000140)=[{&(0x7f0000001480)=""/80, 0x50}, {&(0x7f0000001500)=""/54, 0x36}, {&(0x7f0000001540)=""/200, 0xc8}], 0x3, &(0x7f0000001680)=""/215, 0xd7}, 0x40002000) bind$can_j1939(r0, &(0x7f00000017c0)={0x1d, r1, 0x3, {0x2, 0xff, 0x3}}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0), 0x2, {0xa, 0x4e24, 0x1000, @loopback, 0x7}}}, 0x38) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, &(0x7f0000000000)={0x1d, r1, 0x1, {0x1, 0x0, 0x1}, 0xfe}, 0x18) 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x800) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x88000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:25 executing program 5: bpf$MAP_CREATE(0x8009000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfe800000, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfce2912000000100, 0x401) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:25 executing program 5: bpf$MAP_CREATE(0x800a000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) prctl$PR_GET_FP_MODE(0x2e) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCDISCONN(r1, 0x7439) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000040)=0x77) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfe80ffff, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 07:25:25 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0x4c02, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rpc\x00') 07:25:25 executing program 5: bpf$MAP_CREATE(0x800b000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x3) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xfec0ffff, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:25 executing program 5: bpf$MAP_CREATE(0x8c02000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 0: r0 = gettid() syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='projid_map\x00') sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x888a5d70ef64768, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000100)="b5c77b82dd2a884d1630c27ffb67e33c8defd757db48ba6899272ac246d69c659b908f055e5ea26aa61d4c192cd7375884c93d851c47767815f7e49928bf170b50dc82ebdb4fd94f632e058471e3c07bb3842b0df5ae68ca487a7caff9c96112219c3c9d4521c3a49ff41ed060106f0a7d35db3ef9a632fced35f0d4f39c4c1b5a335718b7ed8996ca66f333cf718f76c66c3caca032041b7b0958fbdb75f38ba5b40de8b7636ef67a6c1c4a7fe02df74f76e6f4fed0fd77ead104557db9ef812bb6106f84198a7f088b6498ed4c8e0fc501a04c07498669c9f456239730a3ad64382afa6be08472ff467b136ef40c287696da08d2b5cfd3", 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) getpgrp(r0) r2 = syz_open_procfs(r0, &(0x7f0000000280)='net/tcp\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'fscrypt:', @desc3='e8dab99234bb312e'}, &(0x7f00000003c0)={0x0, "1e7997493c460de6d11b0cd6b79faa26d729df10b9c8beb3539cea2038026ed74674e628de37940ed3c885cb11ebc2cfaa3f80987b983e22c9c203c4b9a30b6e", 0x26}, 0x48, 0xfffffffffffffffc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) fstat(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, 0x0) keyctl$chown(0x4, r4, r7, 0xee00) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000300)=0x5000, 0x4) ptrace$peekuser(0x3, r0, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000010) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)) 07:25:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='totmaps\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3fb8, 0xc2400) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xff000000, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) socket$l2tp6(0xa, 0x2, 0x73) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00', 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$reject(0x13, r0, 0x7, 0x4, r2) r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r3, 0x6, 0xfba1, r2) keyctl$unlink(0x9, r0, r1) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x52281) gettid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='auxv\x00') 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 07:25:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r3, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c02, 0x0) 07:25:25 executing program 5: bpf$MAP_CREATE(0xc903000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xffff80fe, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) 07:25:25 executing program 5: bpf$MAP_CREATE(0xd902000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='setgroups\x00') 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xffffc0fe, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1000000000, 0x600) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') getpgrp(r0) 07:25:25 executing program 5: bpf$MAP_CREATE(0xe603000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') sendmsg$can_j1939(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x3}, 0xfd}, 0x18, &(0x7f00000001c0)={&(0x7f0000000100)="f0390fdafa23f2e821b4fa22d482df771a14be01b01a25c78c7c5639f36b9950fc179d8aed096d7ee96290506d41e7e03f63deb4b15a4a93aa2d50d8c06482fa40f3dbc8f3b27f6b8cd303760aad0cb28484908df402d2a7c7b399e3c6fece6c74cdd363c8ad4cac8cc5f8b094e4de93521764dcab51e2fe816b6fef201244dfbbc7f00def50f61bcc95a40cace8dac609a949ebfa47a459f4de36aa150899333ca5ea3ef1f8fcf558b407bc6a5c419d72e97e975d3d5b", 0xb7}, 0x1, 0x0, 0x0, 0x8000}, 0x4008095) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x9, 0x20a180) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xffffffe0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 5: bpf$MAP_CREATE(0xec00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 07:25:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000005, 0x618000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:25 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25050000000500130002003d0006001c00060000a20c0016001f0000000000000014001f002001000000001900000000000000000105000d0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r1}, 0x8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r2, r1, 0x0, r3}, 0x10) 07:25:25 executing program 5: bpf$MAP_CREATE(0xff00000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:25 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x4, 0x6, "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", 0x4, 0x4, 0x5, 0x6c, 0x9, 0xc7}, r3}}, 0x120) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0x9) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000400)={0x8, 0x120, 0xfa00, {0x2, {0x7, 0x4, "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", 0xdd, 0x60, 0x2, 0x5, 0x5, 0xc0, 0x3}, r2}}, 0x128) 07:25:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x4080) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x2], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/raw\x00') ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000040)={0xf, 0x8, 0xfa00, {r6, 0xc}}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={r3, 0x80000}) 07:25:26 executing program 5: bpf$MAP_CREATE(0xff01000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x6], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000040)) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) getpid() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ipv6_route\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3}) 07:25:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x288040) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, 0x14, 0x8, 0x70bd25, 0x25dfdbff, {0x27, 0x73}, [@INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "85e0cba67ec75f71125339d03c2a29cb2a3dd3c6edaedcbf26a8773c315f1853c9b84b29d2711b33f457679c222013d00d21006d86ec5acff8a1d8901797f87468722b78b63e5ce35019bec078049f825e33538185a9f2d1c2940c01886e15f59580b99845d74376cdaaded69d05fe30249287c815cc01da205ef4f4379a6ae873d5609e27eb1f950804a6ac302f69d211ea8342a24754e43772be"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4008854}, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000400)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={r5}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x781}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042dbd7000fbdbdf250100000014000800766c616e30000000000000000000000008000a000200002e"], 0x30}}, 0x8000) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000140)={0x8, 0x120, 0xfa00, {0x0, {0x8000, 0x5, "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", 0x3, 0x95, 0x0, 0x0, 0xda, 0x3, 0x4}, r7}}, 0x128) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_trie\x00') ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:26 executing program 5: bpf$MAP_CREATE(0xff02000000000000, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x8, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000100)={0x0, 0x6}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) 07:25:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x484000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0xc8200, 0x0) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0xfc], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)) 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x9, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x121000) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x1857) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x22]}, 0x40) 07:25:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x23]}, 0x40) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x65a3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) 07:25:26 executing program 4: r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r0, r0) r1 = add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="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", 0x1000, 0xfffffffffffffff9) keyctl$negate(0xd, r1, 0xfffffffffffffff9, 0xfffffffffffffffa) keyctl$negate(0xd, 0x0, 0x6, r0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10080) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0xa, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x1d, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000200)={0x1, {&(0x7f0000000100)=""/41, 0x29, &(0x7f0000000140)=""/129, 0x1, 0x2}}, 0x48) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f00000000c0)={0x8029, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0xfb5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffffff98}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_DEBUG={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400004d}, 0x4044) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000080)=0x81) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/snmp6\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0xfffffffffffffcf4) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000001, 0x4000) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000040)={0x4007, 0x5, 0x3, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/key-users\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000100)={r2}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7c8d5b2e, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x6, @local, 0xff}, @in={0x2, 0x4e20, @multicast2}}}, 0x118) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x8008, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x498000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r2}) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sessionid\x00') 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x8, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:26 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x1e9ec68a08555d91}) 07:25:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x9, 0x2200, 0x8, 0x40}, 0x40) 07:25:26 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x813, 0x200800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x200) r2 = add_key(&(0x7f0000000140)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="4981dc71805d5420f496186e9fc9392b6e3cbafc6949d22de9a43689627c1515ff419eab0e0f2ffc4536a344991e1851cfe896f8803ddb5d1fb51310e4849d7d7a4d3ebf85c36d7e6039c80e2840968dd63aebd3b54ab026e12746a7e4740687cac9691642ff523ab104882b0c5fd7fea1bbd3672483d75a10306007ee74d037a21dfcd85fe678018b65087402bf5c529fad2a86c6a5455f835288023393d554618c0ce822c3fc0a661bd71e15da26d1ad2b7df3b5cd77b6004cedbd3c9b82e892f3c10bc742f921692a26a145f5cc52c8bca52ca5d7", 0xd6, 0xfffffffffffffffa) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r3, r3) keyctl$negate(0xd, r2, 0x7f, r3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000100)={r4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0xa, 0x2200, 0x8, 0x40}, 0x40) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = getpid() r2 = syz_open_procfs(r1, 0x0) r3 = getpid() r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x200001, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) syz_open_procfs(r3, 0x0) ptrace$peekuser(0x3, r3, 0x80000001) r5 = getpgrp(r3) syz_open_procfs(r5, &(0x7f0000000180)='net/snmp\x00') ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) syz_open_procfs(r1, &(0x7f0000000140)='net/vlan/vlan0\x00') 07:25:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x84000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x1d, 0x2200, 0x8, 0x40}, 0x40) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffd, 0xa0600) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0xa000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip_vs_stats\x00') write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000280)={0x12, 0xffffffffffffff9c, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r7}}, 0x18) 07:25:27 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffc, 0x321442) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x8008, 0x2200, 0x8, 0x40}, 0x40) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x406903) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:27 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x4, 0x8, 0x40}, 0x40) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="353701208040ede4702cd450225437f57e219935fe0ea5d37152b235e264053b0e1a30ec0da6a9ade9a802967099d3f10682b7d4a15065ab1562da5278b976122b51257ee5efc65563ea6c2e7ba406e64ba4ee85b57fe840299d3bcc5171f78f2131f42d07c7fd28f639ede72cd85976ba41f8ad9f8a230283d64046c8ff4155b3a95dba6cbebaa8f58b798a14d09b54d5d114337d569c2a7a503566510fb408", 0xa0, 0xfffffffffffffff8) keyctl$revoke(0x3, r1) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:27 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2202, 0x8, 0x40}, 0x40) 07:25:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x403) r1 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000061616161616161616161616161616121616161616161616161616161616161610000313131313131313131313131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffc) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1, 0x0, 0xffffffffffffffaf}, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r2, @ANYRESHEX=r3, @ANYRESOCT=r2], 0x0, 0x0) keyctl$revoke(0x3, r1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r5, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) keyctl$unlink(0x9, r1, r5) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f0000000200)) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2203, 0x8, 0x40}, 0x40) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 07:25:27 executing program 0: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x800) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) socket$isdn(0x22, 0x3, 0x24) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2204, 0x8, 0x40}, 0x40) 07:25:27 executing program 4: write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x11}}, 0x10) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180100001200080029bd7000ffdbdf252b0809034e224e23ff070000140900000500000003000000ff7f0000000000000500000007000000", @ANYRES32=0x0, @ANYBLOB="08000000ff0000000800000080000000cc000100e4dc0382b33580808b8bc2fad2e02f65989d3392c6a252f93a1580f32299d98b54fe238000c3f4a72e1cd942f1201352e4fdb3397d126034008feeeb8892d37d7bec5226ec9bd73881669915136fc8b47ccb92e6c5eea3fc581b0fcdde66116865ca0f12a3b04c819383b384b15e00988f905aadb474247acbda23aa5ab63365add30362b93b9e2c0f27650687bee8b371c4f4952f8e0fb0916fde1b7d5e7ef165d16bf2d6755e3b26357506a98b453e296204388b21e6047070222b"], 0x118}, 0x1, 0x0, 0x0, 0x11}, 0x40000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x200800) 07:25:27 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x28, 0x80000, 0x1) r2 = socket(0xb, 0xa, 0xffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x8}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40004) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x200002, 0x4) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2205, 0x8, 0x40}, 0x40) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 07:25:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x8080) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r1}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8000, 0x101100) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2206, 0x8, 0x40}, 0x40) 07:25:27 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9a5a, 0x208000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) 07:25:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='smaps_rollup\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080), 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 07:25:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:27 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 07:25:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2207, 0x8, 0x40}, 0x40) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x0, 0x4, 0x3f, 0xc34}, {0x400, 0x8, 0x59, 0xd27}, {0x1, 0x88, 0x6, 0x1}]}) 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2208, 0x8, 0x40}, 0x40) 07:25:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/key-users\x00', 0x0, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000001280)=[{0x3, 0x1, {0x1, 0xf0}, {0x1, 0xf0, 0x6}, 0x1, 0x1}], 0x20) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000000000000002000000000000000900000000200000030000000000000052000000000000009e0606ad0000000000000000000000000000000000a2ccea17f999c1ddf17b45f065d10000000000000000000000000400000000000000000000000000000e7f80007fdfccafcfd39b31b4a5b33f0bb55468ebffffff000000"]) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2209, 0x8, 0x40}, 0x40) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 3: ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x301, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x2, 0x9}) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) r1 = getpid() syz_open_procfs(r1, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='net/vlan/config\x00') 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220a, 0x8, 0x40}, 0x40) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r1, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220b, 0x8, 0x40}, 0x40) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x848) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x188, 0x14, 0x200, 0x70bd25, 0x25dfdbfc, {0x29, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "773dc45d51d043a296532844d144f8f2eccb8aec5cb0d04fd1a601fd81d9a5fed9bc82adfa5915fe586cf413dbfc56393f1d0cd81205a40f5afaa5a370126e93fe4ecb43d6c9a61597287bd56ad470dfb90ff4ff6ff0e781fde1d622a5aab26efe3f1c56bd725840497896c6b02e2f9b71a6b3e246f668430420bb04c1996a64c59f937b0a685a148695b495c7e58374d8ddeea411709b9108e1dfa66645a7cfe7a2295b36dcc1f818ceaf7affe5318374064f6d7e3c1e51767cc7baf398162d34ddd03ab380e0710729ce4d433658c2788b35f559802c27d5b41c76b3d39c20db18c33d834daa"}, @INET_DIAG_REQ_BYTECODE={0x88, 0x1, "d9ea63143d16c7c214e156dc6713444bd71e435268d7a03d40474978ec5b2740dc03537e1230d9ff14586b8f5e99787730a36df878827a9ba869a7cb155dd8e99de474390057fb00ba633cb68a842c9ec40025fa7a1c105360f630a7ba5182eee39ad3b5f00adf32488b685af5c767a4bc08ca3cec46475b8a7659a224158fcc1306aeda"}]}, 0x188}, 0x1, 0x0, 0x0, 0x850}, 0x4804) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220c, 0x8, 0x40}, 0x40) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 07:25:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) r3 = getpid() syz_open_procfs(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000880)='map_files\x00') r5 = syz_open_procfs(r3, &(0x7f00000001c0)='autogroup\x00') ioctl$BLKGETSIZE(r5, 0x1260, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, '\x00', "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"}}, 0xffc9) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r0}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000140)={r8}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040)=0x1, 0x4) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220d, 0x8, 0x40}, 0x40) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 07:25:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x60000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x40000, 0x0) read$alg(r1, &(0x7f0000000140)=""/115, 0x73) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') r3 = io_uring_setup(0x3953, &(0x7f00000001c0)={0x0, 0x6663, 0x10, 0x2, 0x198, 0x0, r2}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x2042) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220e, 0x8, 0x40}, 0x40) 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffff, 0x4a003) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r1, 0x2b, 0x11}, &(0x7f00000001c0)={'enc=', 'oaep', ' hash=', {'rmd128\x00'}}, &(0x7f0000000240)="900fe5b1578043964609c96a3c9253ffc445d3d91feb1011f65e0b07059c12fddbe96ac2a65946353cce99", &(0x7f0000000280)=""/17) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 3: ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpid() r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='fd\x00') 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x220f, 0x8, 0x40}, 0x40) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:28 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) sendto$isdn(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x101, "6d2696effbb61eca0fdf097283f35e583a6a3b4d8229684377622be74cd7b5581c28d1df0d810871dc8bda408f15040879a23dc521ebe51bedb1311246769fa401b7515809959dfc0a84b6d8f23d83c37996470138a654ae52b38bb93ec9b385ab30b5aa13ef34deba290e5cb7c5920f35aab8110d651c7346c377e20793e4395432ceedc13dd693afd8400f565bb2b74b6698a9e5bec61c79caf8b93d0177d731cea05ccb4f5c91d2ee6ae2c8b96fcfbb65a2acd4706d1cb15098c0927b740b9d7652ee070001cdc1a010615625e40535be6021ad570269bd42c2ce54e2fe1a2c29bba103cf07"}, 0xef, 0xc, &(0x7f0000000040)={0x22, 0x4, 0x7, 0x56, 0xb2}, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x189042) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1000, 0x169200) r1 = socket(0x23, 0x3, 0xffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x80, 0x2, 0x0, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1, 0x700, 0x2, 0x9}}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:28 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 07:25:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2210, 0x8, 0x40}, 0x40) 07:25:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) keyctl$link(0x8, r2, r2) keyctl$reject(0x13, r1, 0xb57, 0x3, r2) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) 07:25:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000100)='net\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2211, 0x8, 0x40}, 0x40) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2212, 0x8, 0x40}, 0x40) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x301840) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2}) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x8001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 07:25:29 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2213, 0x8, 0x40}, 0x40) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f0000000240)}}, 0x18) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250500000006001c0006e1000006001c000300000005000d000100000006001a004e23000014001f00fc0000000000000000000000000000010800190064010101"], 0x50}, 0x1, 0x0, 0x0, 0x42000}, 0x81) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000001c0)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r0, 0x1}, 0x10) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4a400, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0x30, 0x1, @ib={0x1b, 0x5, 0xffff0000, {"761a2b4a96067c9002efeaad7daef3d5"}, 0x7, 0x80000000, 0xff}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000140)={r1}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r3, 0x165951ec5142c45f}) write$apparmor_exec(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="737461636b2007da297d10"], 0xb) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2214, 0x8, 0x40}, 0x40) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0x100000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2215, 0x8, 0x40}, 0x40) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 07:25:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0xd4, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x3, r3, 0x30, 0x1, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={r4}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000140)={r2, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={r3, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40642, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000001c0)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000100)={r7}) ioctl$PPPIOCSMRRU(r5, 0x4004743b, &(0x7f0000000200)=0xfff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2216, 0x8, 0x40}, 0x40) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 07:25:29 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2217, 0x8, 0x40}, 0x40) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}, 0x40) 07:25:29 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, 0x0}) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r2, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:29 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) fstat(r0, &(0x7f00000000c0)) r1 = gettid() syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') 07:25:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x488001) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000001c0)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0xb3bd}}}, 0x90) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:29 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2218, 0x8, 0x40}, 0x40) 07:25:29 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}, 0x40) 07:25:29 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:30 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2219, 0x8, 0x40}, 0x40) 07:25:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0x13, 0x7, 0x1000, 0x0, @loopback, @mcast1, 0x40, 0x40, 0x1, 0xfffffffa}}) 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x221a, 0x8, 0x40}, 0x40) 07:25:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000}) 07:25:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x400000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x221b, 0x8, 0x40}, 0x40) 07:25:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 07:25:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x400000) bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x5, 0xc8, 0x1f}, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r0, 0x4) 07:25:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x9}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r4}}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r5}) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x801, 0x0) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) 07:25:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1, &(0x7f0000000100)=""/184, 0xb8}, 0x4120) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x221c, 0x8, 0x40}, 0x40) 07:25:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x30) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, 0x2, 0x0, 0x9}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="7a7b5c110b363f6c3d6c45ae8486c39c409d0dad7966f5ee1970dfdd334049ace8bfd9c628b6d5f626c5d0b2d8f72453617e52da76bacadad599831e763939a534480da155a7d71be525bebf671ec5b496", 0x51}], 0x1, 0x0, 0x0, 0x80}, 0x20008010) 07:25:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x221d, 0x8, 0x40}, 0x40) 07:25:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) 07:25:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:30 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000040)=0x1) r0 = getpid() setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x1, {0x1, 0x1}, {0x1, 0xf0, 0x4}, 0x0, 0x1}, {0x2, 0x0, {0x2, 0xff}, {0x2, 0xf0, 0x1}, 0x0, 0x1}, {0x1, 0x3, {0x1, 0xff, 0x4}, {0x1, 0xff, 0x4}, 0xfe, 0x1}, {0x3, 0x2, {0x1, 0xff, 0x4}, {0x2, 0xf0, 0x1}, 0x2, 0xfe}], 0x80) syz_open_procfs(r0, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='fd/3\x00') 07:25:30 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x221e, 0x8, 0x40}, 0x40) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x193c81) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/snmp\x00') ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0x21, 0x1}) r1 = socket(0x22, 0x4, 0x3ff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x300, 0x0) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000001c0)=0x3) sendto$isdn(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x8, 0x0, &(0x7f00000000c0), 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000100)) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r5}) r8 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r8, 0x4010744d) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={r7, 0x80000}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2221, 0x8, 0x40}, 0x40) 07:25:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) write$ppp(0xffffffffffffffff, &(0x7f0000000000)="20bb91c97f", 0x5) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x2}, r1}}, 0x30) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2222, 0x8, 0x40}, 0x40) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x6}, r1}}, 0x30) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180), 0x0, 0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="0c0844238828e598bf08e0703f92aba1f0efed41555ae3f5ef90f641b8b13b9af27de0dd1ffa421dd3966ef6d6", 0x2d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:31 executing program 0: keyctl$negate(0xd, 0x0, 0x8, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r1}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r1, 0x57d, r2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:31 executing program 4: r0 = gettid() fork() r1 = getpid() syz_open_procfs(r1, 0x0) ptrace$peekuser(0x3, r1, 0x8) r2 = getpgrp(r0) ptrace$peekuser(0x3, r2, 0xfffffffffffffff8) syz_open_procfs(r0, &(0x7f0000000000)='fd/3\x00') 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2223, 0x8, 0x40}, 0x40) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x9, "7df175cf4bcacfc44d9d936ea39ed220b087286f3201a6d367d6a1806f19cbccd6e4f156a7ca40e84bd4b3ad26cd77522ef2523003c09098d0cf1757c574e21d1b17575a34c15b3ad9225d5f0d0e727b8f36f6adb09d7d804ae07e0035e001fa66d0371e0f0f6b4643f77227e06b32130a7d3be1fd4a3d29b9f69c1890fb71b4b227189419d71366f89b41b8423df0cd69de1def88c64073083bab859df1cca28c0b7343dd401ee4d40ede353746ca9d0cfb857886cfc08ad52dada4347120378b6c9dd0323f97561d7f8de777aa702c9fe8d1d0bde50c576b3c5592cc0c9635ab2d486d424b4112d6178d080a95ee2fc6290f8cc9b0e6b933d70952cc387f6d", 0xba, 0x9, 0x70, 0x7f, 0x1f, 0x40, 0x8}}}, 0x128) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfc}, r1}}, 0x30) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x224e, 0x8, 0x40}, 0x40) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffffb) keyctl$negate(0xd, r1, 0xffffffff, 0xfffffffffffffff9) 07:25:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:31 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000}) syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x600}, r1}}, 0x30) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2252, 0x8, 0x40}, 0x40) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x408400) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0xee, 0xffffffff00000000, 0x1, 0x3}) r1 = socket$isdn(0x22, 0x3, 0x1) sendto$isdn(r1, &(0x7f0000001440)={0x6, 0x2, "1ddf6b09a69a1dfc32098cafb9745b004bf779fdc071858d3314cc3e320ad0f8f7524df2446346f10671b1c734b6a1221fc5809f237bf47fd14ec0e6a0c83ca13b159e8f95cd9e96e04f6020f9d3fe8e0b1cdc5e449f26efbe12944ab0433cb5b40e945293889a8fcf0ca1f33dba78c0962b711c03d8799c57dbe276164e9b38c0ab7518da37f97aa6b8bde6a673a3a5e2ae1ed30e4023ec70ad"}, 0xa2, 0x480d0, 0x0, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f0000000140)={0x22, 0x4, 0xff, 0x8, 0x1}, 0x6) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000180), 0x4) mmap$qrtrtun(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000004, 0x100010, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x16, 0x7f, 0x1ff, 0x3, 0x444, 0xffffffffffffffff, 0x5, [], 0x0, r2, 0x4, 0x2, 0x2}, 0x40) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x18100, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r3}, 0x8) write$apparmor_exec(r4, &(0x7f00000000c0)={'exec ', '/dev/dri/cac\xd9j\xfc'}, 0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 07:25:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000000c0)={r1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:31 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x4, {0x5e30, 0x1, "3df60efb382b38fe68067d936bbd3ec320c16ad40c38ae75c1e7b9618ff54302e68bc63446705b66fcea4345a9df31a14ddcb37db7ce2f857b57f51365847cdee892ff536489bd7273f4e811704e7a1630f814a839e9b52d6ec532e711916e28626d89522f572b6467dcb0efced6b81dbfe4aa012c46c0c9c5e7423c2df52ff4ea8f4f3891c9a8d2080f2abb4da8944850dc9c3c86c4cd344eef947971e415d7c93e6dd1cb9c30b5c0f9b5b0d625e18cae2f543632e9fbc5c77ca12896fff37911155d7bd3936f8de1ab2353e58ad622e2b32472b81404dc3539e9aac17dbfeb36e5964d938c8c91c00bb1bd78641ebea00eba9f6c2cbd4ebb7437b5fad174b5", 0x6, 0x7, 0x62, 0xff, 0x0, 0x20, 0x2, 0x1}}}, 0x128) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x402880, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000200)={&(0x7f0000000140), 0x17, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r3, 0x782, 0x0, 0x0, {}, [@L2TP_ATTR_IP_DADDR={0x0, 0x19, @private=0xa010100}, @L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x3}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @dev={0xfe, 0x80, [], 0x43}}, @L2TP_ATTR_UDP_DPORT={0x0, 0x1b, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX, @L2TP_ATTR_MTU={0x0, 0x1c, 0x1ff}, @L2TP_ATTR_IP6_DADDR={0x0, 0x20, @mcast1}]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r3, 0xb, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x40}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x9}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xcb}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2348c1b3091158f}, 0x4004041) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2253, 0x8, 0x40}, 0x40) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x80fe}, r1}}, 0x30) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2254, 0x8, 0x40}, 0x40) 07:25:31 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = getpid() syz_open_procfs(r0, 0x0) tgkill(0x0, r0, 0xe) syz_open_procfs(r0, &(0x7f0000000040)='cgroup\x00') 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfc00}, r1}}, 0x30) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfe80}, r1}}, 0x30) 07:25:31 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') r1 = socket(0xa, 0x4, 0xd00) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x781}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_MRU={0x6}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x8, 0xee1, 0x15, @local, @mcast1, 0x8, 0x20, 0x7, 0x5}}) sendmsg$can_j1939(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x1d, r4, 0x2, {0x1, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000580)={&(0x7f0000000540)="de57f7bd4d590cd4fd1923c5a7e4d3cefe7b1759f78e2b9ad08856", 0x1b}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) 07:25:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000040)={0x5, 0x6, 0x2}) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 07:25:31 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2255, 0x8, 0x40}, 0x40) 07:25:31 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xff00}, r1}}, 0x30) 07:25:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x1, {0xa, 0x4e22, 0x101, @mcast1, 0x401}}}, 0x38) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2409c2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0x4c02, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0xac, 0xeb, 0x200, 0x20, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x10, 0x80, 0x0, 0x5}}) 07:25:31 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x80000001, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={r1}) 07:25:31 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) getgid() 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2256, 0x8, 0x40}, 0x40) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x2000000}, r1}}, 0x30) 07:25:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x84800) r0 = syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/bnep\x00') read$alg(r0, &(0x7f0000000200)=""/134, 0x86) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000140)=0x800) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80000001, 0x40000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/igmp\x00') setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000001c0)=0x1, 0x4) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0x6, 0x9, 0x8, 0xfe}, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2257, 0x8, 0x40}, 0x40) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x1, {0x6, 0x6, "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", 0x0, 0x6, 0x5, 0x6, 0x1f, 0xbf, 0x0, 0x1}}}, 0x128) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x6000000}, r1}}, 0x30) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2258, 0x8, 0x40}, 0x40) 07:25:32 executing program 4: ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xe0ffffff}, r1}}, 0x30) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2259, 0x8, 0x40}, 0x40) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 07:25:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ocfs2_control\x00', 0x2080, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfc000000}, r1}}, 0x30) 07:25:32 executing program 0: write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x100}}}, 0x90) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7e, 0x4, "3196f61159e10c165d59c397a5c74b1c60af9045ed385a3a79ee1103053a7af986e1ad7b10716c02206988c7a50f807b721fc182d605fe199548150d5f8fa8cc8946f3d53a46a5e9b0a2672f1851ab7e309f95f995d6c07d67f7b88822a838fa6a503735e992067b23924b95caf86efc73100b11130815de80c0d540b70955de388792a28e011b1e00015954c06df2975517982fe9dbc5a249f3cc835f58d9dc75987fca67216ea1a6edcffd19d0a5fadd435845e7e2c9f38fc98410101b6b825dd76c17b2deda7e2fbf7651b540fa73403d5ecc891e9011938fd4389da11817f013883d19bbc023e04d6ad03bf7e563e5dc218f5b320e29ddc832bc782e4f5b", 0x1f, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x40, 0x1}}}, 0x120) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000007c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000480)=[{0x3c, 0x0, [0xffff, 0xfe7, 0x6, 0xffffffbd, 0x62000000, 0x5, 0x0, 0xe0, 0x2, 0x7, 0x7f, 0x5, 0xffff0001, 0x1, 0x11, 0x1]}, {0x4, 0x0, [0x6, 0x0, 0x3ff, 0x200, 0x1, 0xff, 0x7, 0x101, 0x3, 0x8ce1, 0x8, 0x7fff, 0x7, 0x8, 0x4, 0xe413]}, {0x20, 0x0, [0x6, 0xff, 0x2, 0xfffffffd, 0x8, 0x100, 0x46, 0x8, 0x8000, 0x1c000, 0x3, 0x1000, 0x975, 0x2, 0x2cd, 0x6]}, {0xc, 0x0, [0x1f, 0x2, 0x3, 0x7, 0x4e3f, 0x7fffffff, 0x6, 0x6, 0x1, 0xfffffbff, 0x9, 0x200, 0x0, 0x260, 0x8, 0x6]}, {0x3, 0x0, [0x1, 0x6, 0x16be, 0xc0, 0x8, 0x23b, 0x81, 0x400, 0x9, 0xef, 0x0, 0x8, 0x1, 0x3, 0x1]}, {0x14, 0x0, [0xfff, 0x1, 0xfffffff9, 0x6, 0xa113, 0x4, 0x4, 0x3, 0x7f, 0x7, 0x8, 0x2, 0x3, 0x8001, 0x10000, 0x9]}, {0xc, 0x0, [0x6, 0x3, 0x3, 0x4, 0x800, 0x4, 0x8, 0x7, 0x3, 0x7ff, 0x3, 0x2, 0x48a55dac, 0x3, 0x1e52]}, {0x17, 0x0, [0x6, 0xea5, 0xe9e, 0xffffffff, 0x9, 0x6, 0x80000000, 0x0, 0x40, 0x674, 0x7fff, 0x0, 0x8, 0x8, 0x0, 0x5]}, {0x4, 0x0, [0x9, 0x0, 0xffffffff, 0xcc, 0x2, 0x2, 0x0, 0x5, 0x9, 0xffff, 0xffff2cd5, 0xff, 0x4, 0xffff, 0x200, 0x5]}, {0x6, 0x0, [0xffffffff, 0x5, 0x9, 0x6, 0x4, 0x9, 0x0, 0x4, 0x0, 0x5, 0x7, 0x1ff, 0xff6, 0x9, 0x8, 0x2]}], r2, 0x1, 0x1, 0x2d0}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r5, 0x2, "4ee967", "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"}}, 0x110) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x22ec, 0x8, 0x40}, 0x40) 07:25:32 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfe800000}, r1}}, 0x30) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2300, 0x8, 0x40}, 0x40) 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, 0x4, 0x0, 0x20}, 0x10, &(0x7f0000000240)=[{&(0x7f00000000c0)="ad4751a58c61bbe0ac7862504031bc2d61c9f4ed0fb548a5a6665f84a14da20eb2a291371b6b76c79b1364d588c865e12ec612c7331a0a5ed9649d52d9d277429274b69d9b9020bcf275f8c5a74681e61d98da986f97cb16c00f0d41b3b2ea955b6ec38a58677711fa0e2b19d742ad9e6fce9c23bd3d5340fdbdf58e36beeb50a2ee", 0x82}, {&(0x7f0000000180)="c41a5053f77d5a501f63159a285c1283a632e893fb6e0affe2538d18d091c5b5e3b5a228478766265e9d8614ecab1f1227ad9e57d8fe307f3098169c819db27c4c7560c681b5359b6dbd3c1b6a75f41ce6ef26ce9e81adbad931f92afb86455aaf6316b5630e8e5b09852aa734bca683a3d07e001beb42f22c891f7e83ccbb905d138084502f3e0ada36", 0x8a}], 0x2, 0x0, 0x0, 0x4c0c0}, 0x20000080) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfe80ffff}, r1}}, 0x30) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={r2}) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x100000, 0x8, 0x40}, 0x40) 07:25:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) fork() r0 = fork() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/netlink\x00') getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x265a1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xfec0ffff}, r1}}, 0x30) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x2, 0x40}, 0x40) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80400, 0x0) r1 = socket$isdn(0x22, 0x3, 0x1) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:32 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80242, 0x0) 07:25:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 07:25:32 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xff000000}, r1}}, 0x30) 07:25:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:32 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r1}, 0x8) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x4, 0x5, "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", 0x7, 0xe9, 0x3f, 0x7f, 0x9, 0x0, 0x3f}}}, 0x120) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000180)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={r3}) 07:25:32 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x4, 0x40}, 0x40) 07:25:32 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xffff80fe}, r1}}, 0x30) 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x680a01) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:33 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001d40)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000001dc0)={0x9, 0x108, 0xfa00, {r1, 0x1, "160530", "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"}}, 0x110) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x2, {0x2, 0xf0, 0x3}, {0x1, 0x0, 0x3}, 0xff, 0xff}, {0x0, 0x1, {0x1, 0x1, 0x1}, {0x2, 0x0, 0x2}, 0xff, 0x1}, {0x0, 0x2, {0x0, 0x1, 0x2}, {0x1, 0xf0, 0x1}, 0x2, 0x2}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}, 0x82, 0x2}, {0x3, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x1}, 0x2, 0x1}, {0x0, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1}, 0xfd, 0xfd}, {0x2, 0x3, {0x0, 0x1, 0x5}, {0x1, 0xf0, 0x4}, 0xfd, 0xfe}], 0xe0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x11c, 0x14, 0x20, 0x70bd2d, 0x25dfdbfe, {0x22, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "1870e6621b7553f02be9f6b597b02722e291032c7c9e19b78beb335516e52b712dd483f56af524f198fa29629a83a6559fd2f8b47a9d8a2deac092919bc59dc1fad4b6345ed5de7f6580677f386977b6cb6c116f07634bee199665755e1a73b6ac2055904c6d10525ddee797d85b149ec1dbc13a5ce2489a"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "1e62a06644f49926932f7ec63dacc5c5690665ec22ab242446aa807f4ebc479e700d1286b29e2917a201caabaa35f00f77ef832c68c3ef511769c1ece46147d99abceb918a51c081a9d64cbfda2ca2121f35c1901ece0a1ed10e593c0c751bef251634771cf734b2bf78e9d66a874a2d34c7b05f3fc5115713b35d481db9fa3f0c6b3eaead97ff"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x80}, 0x20040) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001f00)='net/stat\x00') read$rfkill(r3, &(0x7f0000001f40), 0x8) ioctl$BLKPG(r2, 0x1269, &(0x7f0000001980)={0x4, 0xffff7fff, 0x28, &(0x7f0000000800)="2d2beb08c5b2623d04139bdf9f09698f0f6c4caf122eae765d64fac5c3851bc3100ba381f5efc710"}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r2}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f00000005c0)=""/66, 0x42}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000001ac0)=""/183, 0xb7}, {&(0x7f0000001b80)=""/250, 0xfa}], 0x9, &(0x7f00000018c0)=""/152, 0x98}, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000680)=0x1, 0x4) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x5, 0x40}, 0x40) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xffffc0fe}, r1}}, 0x30) 07:25:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r1}) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x6, 0x40}, 0x40) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0xffffffe0}, r1}}, 0x30) 07:25:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}}) 07:25:33 executing program 4: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="020000000000000061616161616161616192f5a036fe9b20c36161613131313131313131313131313131313131313131313131313131313131313131"], 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0}, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0) keyctl$reject(0x13, r0, 0xd0, 0xffffffffffff0001, 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() keyctl$chown(0x4, r0, r1, r2) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x96e8, 0x313040) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fork() 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x54, 0x13, 0x1, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x300) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000180)={0xa, 0x4}, 0xc) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x7, 0x40}, 0x40) 07:25:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000}) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x8) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 07:25:33 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e21, 0x2, @mcast1, 0x8}}}, 0x38) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x41, 0x40}, 0x40) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x20000430) 07:25:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xcfc9f3c205c3790f) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 07:25:33 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x801, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) sendto$isdn(r0, &(0x7f0000000100)={0xd4, 0x9, "3a0eb79385e65b618f1c606ebd7b5edfdea3b4bc3e52bf54e6e8947e89d7db0c4c478badeb03fafbe694dd98895a06e73c08652cb793e5c3"}, 0x40, 0x80, &(0x7f0000000140)={0x22, 0x4, 0x65, 0x0, 0xf3}, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) 07:25:33 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x52, 0x40}, 0x40) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x7ffff000) 07:25:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x8100, 0x0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 07:25:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000280)=ANY=[@ANYBLOB="060000008a0000000300000000000000ffff0000000000008f5ad4030000000002000000000000007f0800070000000000000000000000000000000010000000000000000000000000000000000000000000000000d05400750000000000a70020000000000000008000070600000000000000000000000000000000000000000000000000000000000400000000000006000000005b6059c140a9b60c0000001f0000000000000001000000000000000600818100000000000000000000000000000000000000000000000000000000428a11d7476a773294e0a84da2ac2e069b57f6e7e00cadc5e7fa1d6d2b69c5b8c49cc6ec405cb29817d014e2079c3b56e3596a82d2c1e6d7c17c1a99821fa9eb6e529e2c31e01638d1f52fab72bcc447289ae417d9cf140d1432be15e7e37d351a108f11e6b0d80e2d1ee599df60988e84a2ff9d41511c2ddf6abfbf8cf80f47965b2780ee4a31624e77a161d786072df9a9d82748b43578155ab1fa04d21144322693bbea4c55468489889bc7afdb3ade8e637732d66d01cd02e61f503cd50e6e569d407576dc0811d559b8e64bbd284c2bf75a751fb93fec93"]) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000001c0)={r2}) 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r2, 0x6, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffffffc0, {"83fc878427f584d0d46231fb89df97ca"}, 0xb07, 0x5}, @ib={0x1b, 0xb62, 0xff, {"bcf3edd96f9fedb1ad1be2ec47fe7674"}, 0x7, 0x9, 0xa1bd}}}, 0x118) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000200)={0x8029, 0x3}) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x63, 0x40}, 0x40) 07:25:33 executing program 0: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, {&(0x7f0000000440)=""/2, 0x2, &(0x7f0000000480)=""/129, 0x1, 0x2}}, 0x48) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000400)=0x5bc) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x250, 0x14, 0x8, 0x70bd2d, 0x25dfdbff, {0x26, 0x3f}, [@INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "f07d0017c0e99c0d7aba29f7fb1b2a86bae6caf0b0a190d36e8b17"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "120d03966948b4398ef767cdb5af95b316796e65fd4de72ee574e2a0041e4a681d531555f0eb6c57340c728187237675874bcdcf36"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "b35304243fcc681bc864062008f2e8dc948cf579acad879eced22928592cdf5625ad8062b7cdcd4c90663311de"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "9e92e5e5d7ed9121ca4e54b04a568410d7257dee591b1516b1931ba89bb349abdc05aac0e92b4fa7c7b4f391a3b583204f12c9be38138788a017dbade69f2a5d9ab2a7afc4034ec6f8939cba491305e4554464dba5d7456e1608c61d5b642f0a1186a72732db02dfb72bf564494d"}, @INET_DIAG_REQ_BYTECODE={0x32, 0x1, "4a8c3226b591c86a376ce69666119518769a16876605d74ec37f4c74a8db60107f69f5c07da3252da125e5810ae9"}, @INET_DIAG_REQ_BYTECODE={0x36, 0x1, "af568e8b6e62e45650005436d425a338d7dc3d95cd758fc0f32f197e660184f6eb825a47af5c901940ba8232242c6a8cc9e2"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "34216eb87c0fd0b5cea7535fbb63e3ce5df6c9d747ffc50a62f4eb14145ac16d5e46118c6a93f6989d693b0b1842f2759a08604e672e4076cfac2a3668c6edf9cc706f6fba873a039f8901e7ea9cec740a0443024547c4776cb8ea7e8ea3cf49ac2f19bff70486eab2a4193266dace82d748a4466fcece0b8a1140ff356ff0244eebaba19bfaecc706e316c0404bccad1bd0746fa2b6c79b77e4a53688ddba26fd140df92fd4b7c38ea5e7658219c7d7111c7aa1a4375ab32a5f8634bc33685ae1"}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000040}, 0x4ecc7f7c3ddaf201) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000003c0)) 07:25:33 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0xffffffffffffffff) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 07:25:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:33 executing program 0: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000100)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) 07:25:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0x2f, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:33 executing program 1: keyctl$set_timeout(0xf, 0x0, 0xfff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x40009, @empty, 0x8}, r2}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 07:25:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x0, 0x0, [0x8000, 0x1, 0x74, 0xd733, 0x1ff, 0x8, 0x7, 0xfffffffa, 0x7f, 0x878b, 0x1000, 0x7, 0x40, 0x1, 0x10000, 0x3]}, {0x10, 0x0, [0x7fffffff, 0x3, 0x20, 0x6, 0xffffffff, 0x7, 0x4, 0x10200, 0x7, 0xadd0, 0x90, 0x17, 0x43, 0x8, 0x8, 0x7]}, {0x10, 0x0, [0xb, 0x3, 0x0, 0x3ff, 0x4, 0x7, 0x6, 0x7ff, 0x7fff, 0x65abde26, 0x9, 0x1, 0x798, 0x1, 0x0, 0x4]}, {0x8, 0x0, [0x2, 0x69, 0x0, 0x2, 0x2, 0x2, 0x1, 0x7, 0x3d4211b8, 0x1, 0x4, 0x4e3b, 0x8, 0x0, 0x84, 0x8]}], r1, 0x1, 0x1, 0x120}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {&(0x7f0000000440), r5, 0xff}}, 0x18) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000080)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:25:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}, 0x40) 07:25:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f}) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) 07:25:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}, 0x40) 07:25:34 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8003, 0x40}, 0x40) 07:25:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x2}}, 0x20) 07:25:34 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x140000, 0x505ac2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x165951ec5142c45f, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200, 0x600) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 07:25:34 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) 07:25:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:34 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:34 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 07:25:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r0}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000040)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @loopback}}}, 0x90) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x431, 0x105502) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0x4c02, 0x0) 07:25:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in6={0xa, 0x4e24, 0x2, @local, 0x3}}}, 0x90) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:35 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8008, 0x40}, 0x40) 07:25:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:35 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x1c3300) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:35 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x200, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000440), r5, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r2, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x4d, @empty, 0x4}}}, 0xa0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r6}}, 0x30) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r7, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x1a, @loopback, 0xfffffff7}, r8}}, 0x30) 07:25:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:37 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x2, @loopback, 0xfffffff9}, r3}}, 0x30) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}, 0x1}, r1}}, 0x30) 07:25:38 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8038, 0x40}, 0x40) 07:25:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, 0x9b5c}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r3, 0x1}}, 0x18) 07:25:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0xbf6, 0x0, "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", 0x7, 0x29, 0x7f, 0x1f, 0x6, 0x5, 0x8}, r2}}, 0x120) openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qrtr-tun\x00', 0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r3}}, 0x30) 07:25:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x3, 0x40}, 0x40) 07:25:38 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffe, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, r2}}, 0x30) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e24, 0x5, @loopback, 0x2}}}, 0x90) 07:25:38 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r2}) 07:25:38 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:39 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8049, 0x40}, 0x40) 07:25:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x3, 0x40}, 0x40) 07:25:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x81, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe2a, @remote, 0x2}, @ib={0x1b, 0xffc0, 0x9, {"50eaa0a834552d852b023fce1c64d9ee"}, 0x3f, 0x1ff, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000002c0)={0xf, 0x8, 0xfa00, {r1, 0x4}}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r6, &(0x7f0000000200)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) 07:25:39 executing program 3: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x4, {0x8, 0xfffffe01, "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", 0xd2, 0x4, 0x20, 0x5, 0x9, 0x7, 0x81, 0x1}}}, 0x128) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x3, 0x40}, 0x40) 07:25:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x8040) mmap$qrtrtun(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r1, 0x6) 07:25:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:39 executing program 1: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$ppp(r1, &(0x7f0000000200)="4c98f31a7d785d4510f19bf191989411830772bcbf1342c51c0a7c60fff7317a9a633549aa1f1db29fe395ce4494699560a410467c727de48eb18b8e8e2ce3d915d8fae5501ce7851e3da138d3139f67f561dd5d8330b739bf9c89422f333141941f3c850368971aa8f05041c3e3e138704cf7182adaf2afc76d08bc5b54b71f6b5019a0e9234a4f8c0de740cec8087500f2ed206f46562323b8a8e7c73dc02f3768955f6ceee4f6b1d6b14a658574372582bd5e3820186554ac005b9c108f333c94b550865f7ead89cf86d7e4de13db4f28e8d1f6d354a799d2f6e4ec2a457fcb1bfcf87ff12e", 0xe7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x450e00, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0x2, "4aee7272159da85a90b25c4624101fb4ab90d6da456ae05e81a2f8b5715b4596f3c5b74e2cec2f307301011331b35c4628c3dc2f096e826e47d0a7eee859e51b6c136fd6d0a8f0ed5af41b383593a873dd39fe84486dda080844af5fc8aaf7054306e30b75a8f0a6b55c0863c5a5a1ebdbc145ae6f8e201fc068af26ed1fc660840e9fc4fc938bace78206b1578e5a389244b4ee93c95e29e13fe2b629ea97f3818372a7135e752c4ab8b06a3d3bc18f971d6140f8af0e7095c0e1fc7fc947de8badef8526d55ccbcbcc99e52e27dfecf1cc101a67fc0288640cd1eb7efdda69de70a882a18487c00174d8e017053faf2fac6b90214d18ed8d593af50e99ffa4", 0x40, 0x5, 0x1, 0x7e, 0x1, 0x1, 0xd9}, r2}}, 0x120) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r2}}, 0x30) 07:25:40 executing program 3: r0 = add_key$fscrypt_provisioning(&(0x7f0000000080)='fscrypt-provisioning\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)={0x2, 0x0, @b='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r0}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) keyctl$update(0x2, r0, &(0x7f0000000100)="3de089f5b831ef6b392a2234222074026666585ae8227b4d3bf7c84f395f1adc9e2c6a3da9faece4a31bb6aa433cbabb4a830a2ac09bf532b55f6b1a5fc0e63e083a7ffbbd6206e0098e6c397f3a98f3acf79365fe667d5028f2b8d8f91ee7fe7e332154942a36a43ae6dac6b7f7ec55b7a5fdc99b764c4c1a57138862d9a9e43e16ae80d7639ab451808cfa792e3a0e09fc221b3d5568f79fd8e8defc1c3cb22678aa5542e762236e658e71078fe088a8b1b7b3faac39c4972b3d95d8f5324b15c1ee99b50e89092425f9fb4c5c4da2611d1fcbc346609fcc43399a27cf9eb2a2c3be94f932955bce4be8bfdabfc6051d", 0xf1) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x2c0c0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r1}) 07:25:41 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x3, 0x40}, 0x40) 07:25:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001, 0x40}, 0x40) 07:25:41 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xc6, @mcast1, 0x3}, r1}}, 0x30) r4 = add_key$fscrypt_provisioning(&(0x7f0000000400)='fscrypt-provisioning\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)={0x1, 0x0, @c='abcdefghijklmnopqrstuvwxyz0123456'}, 0x29, 0xfffffffffffffffe) keyctl$describe(0x6, r4, &(0x7f00000004c0)=""/54, 0x36) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e22, @broadcast}}}, 0x118) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300), 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x1c, 0x0, @in={0x2, 0x4e23, @broadcast}}}, 0x90) 07:25:41 executing program 3: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0x4c02, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x5, 0x9, @ipv4={[], [], @remote}, @empty, 0x7, 0x7, 0x8001, 0x191}}) 07:25:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 07:25:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001, 0x40}, 0x40) 07:25:41 executing program 3: ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x9fa) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) 07:25:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x3, 0x40}, 0x40) 07:25:41 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001, 0x40}, 0x40) 07:25:42 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x806b, 0x40}, 0x40) 07:25:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x6}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0xffffffff}, r3}}, 0x30) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) 07:25:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/protocols\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x33, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010102, {[@end, @end]}}}}}) 07:25:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, 0x40) 07:25:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x3, 0x40}, 0x40) 07:25:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001, 0x40}, 0x40) 07:25:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}, 0x40) 07:25:42 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001, 0x40}, 0x40) 07:25:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x3, 0x40}, 0x40) 07:25:42 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x24000, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, 0x15, 0x300, 0x70bd2b, 0x25dfdbfe, {0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "cb02fb78f5a42273f42723e252384f3149266ee136bd15bcd08f870f25faac025bf00ba84759bb60300e6c3ef24eb9d1545371664ef5cfd4d0dfe32169c3f20d9d1cc9d9e8ac602185722073087c0c0f143d3170b6826222e940d4dcd6f584dc29c59d2015122e2436b066f0ee7221"}]}, 0x88}, 0x1, 0x0, 0x0, 0x4094}, 0x8000) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000), r1, 0x0, 0x1, 0x4}}, 0x20) 07:25:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0x4c02, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000100)={0x1f, 0x10000, 0x71, &(0x7f0000000040)="95d8628de22a7de2c25c4468612d0179c6a6dcfe950f808c1f4161f721c0ed0784145ad47d869fbbcc36b4e54d2cfca838824c1dab4c2e0aeb6c8caf2a69f50596744a7d4bc1705cf36130ad46ba7ee318bbe5c43dcc5d0d47a47c475e0040a80f76dad61556dca4ccc03f088ee749b65df17892866b11306842eebf50ac21823451d87d3c4ed27687fa5e5407f95bc13bd1fe8a9b1f6404772b10c808c2c6"}) 07:25:42 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x40) 07:25:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001, 0x40}, 0x40) 07:25:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x19c5, 0x3, "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", 0x7, 0x1, 0x39, 0xcf, 0x7, 0x5, 0x3}}}, 0x120) 07:25:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}, 0x40) 07:25:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}, 0x40) 07:25:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x4, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x78}, 0x40) 07:25:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001, 0x40}, 0x40) 07:25:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) 07:25:44 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:44 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}, 0x40) 07:25:44 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x20001300}, 0x40) 07:25:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3}, 0x40) 07:25:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 07:25:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='totmaps\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, [], 0x1}, 0x8}, r4}}, 0x38) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000100)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1, 0xfffffff9}, r1}}, 0x30) 07:25:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40}, 0x40) 07:25:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x3}, 0x40) 07:25:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x2}, 0x40) 07:25:45 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14]}, 0x40) 07:25:45 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000040), 0x4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x41, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x10) r4 = getpid() syz_open_procfs(r4, 0x0) tgkill(r4, 0xffffffffffffffff, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r3}}, 0x30) 07:25:45 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x3}, 0x40) [ 2680.582160][ T2187] ================================================================== [ 2680.590267][ T2187] BUG: KCSAN: data-race in pcpu_balance_workfn / pcpu_free_area [ 2680.597909][ T2187] [ 2680.600237][ T2187] write to 0xffffffff88f41ccc of 4 bytes by task 9077 on cpu 1: [ 2680.607868][ T2187] pcpu_free_area+0x578/0x620 [ 2680.612554][ T2187] free_percpu+0x1cb/0x740 [ 2680.616980][ T2187] htab_map_alloc+0xa6b/0xc80 [ 2680.621669][ T2187] __do_sys_bpf+0x420c/0x9990 [ 2680.626356][ T2187] __x64_sys_bpf+0x3d/0x50 [ 2680.630781][ T2187] do_syscall_64+0x39/0x80 [ 2680.635228][ T2187] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2680.641136][ T2187] [ 2680.643462][ T2187] read to 0xffffffff88f41ccc of 4 bytes by task 2187 on cpu 0: [ 2680.650998][ T2187] pcpu_balance_workfn+0x911/0xe40 [ 2680.656119][ T2187] process_one_work+0x3e1/0x950 [ 2680.660975][ T2187] worker_thread+0x616/0xa70 [ 2680.665570][ T2187] kthread+0x20b/0x230 [ 2680.669672][ T2187] ret_from_fork+0x1f/0x30 [ 2680.674098][ T2187] [ 2680.676422][ T2187] Reported by Kernel Concurrency Sanitizer on: 07:25:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15]}, 0x40) 07:25:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {r1, 0x5c, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @ib={0x1b, 0x1, 0x9, {"7e72b513cb8edc17635d338cb3174178"}, 0xf119, 0x1ff, 0x4}}}, 0x118) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sched\x00') write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfe, "8e5b5e", "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"}}, 0x110) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x14, 0x1, 0x70bd2c, 0x80000000, {0x2c, 0x8}}, 0x14}}, 0x4000) 07:25:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x4}, 0x40) 07:25:48 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001}, 0x40) [ 2680.682566][ T2187] CPU: 0 PID: 2187 Comm: kworker/0:0 Tainted: G W 5.12.0-rc3-syzkaller #0 [ 2680.692371][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2680.702435][ T2187] Workqueue: events pcpu_balance_workfn [ 2680.708001][ T2187] ================================================================== 07:25:48 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:48 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x5}, 0x40) 07:25:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200, 0x200200) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:48 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16]}, 0x40) 07:25:48 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x59) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4, 0x5414, @mcast2}, r1}}, 0x30) 07:25:49 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x6}, 0x40) 07:25:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17]}, 0x40) 07:25:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001}, 0x40) 07:25:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x7}, 0x40) 07:25:49 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18]}, 0x40) 07:25:49 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x10f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r2, 0x30, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:49 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001}, 0x40) 07:25:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:50 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {r1, 0x7f, "7204de", "108412f947755faf5679b0a12e61e86d7714c22af1e8a1f4231efa1b0550765916dd228efa6f62c337df9db1486a1e09f2326fa987d63a7e4aa8860d740d70878a653306b3a60499827f9a0f61367a369b91b6353e7a4795b54e91420430f278635725ca73dc8f88936f410bcaab013d5ceaf6d1672eaaf8361d0121d636ad34578e5933531a93963c6c0549b138ecce312748178e5a250768807abdacbd9ea8eb7c99784d21dc643781a7f7fd72f79016ab5ff12184d0a10f61cb6ed64ee0aedba0b19bd999264d63eb6986b9b336bf2c1a600f3fb67188542d9cad42c44a162198bdb965df80652c0a64a78444a5e1d622ca80a574dc56696f256ace13e0ad"}}, 0x110) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x8}, 0x40) 07:25:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0xfff9, 0x10001, {"65078de14ff225630749425a237346c5"}, 0x81, 0x0, 0x6}}}, 0x90) 07:25:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19]}, 0x40) 07:25:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x8, 0x8}, 0x40) 07:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x9}, 0x40) 07:25:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:50 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001}, 0x40) 07:25:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000080)=[{0x2a, 0x0, [0x7fffffff, 0x0, 0x8, 0x100, 0xffffffff, 0x10001, 0x1, 0x80000001, 0x40, 0x2, 0x3, 0x7ff, 0x0, 0x4, 0x100, 0x7f]}, {0x8, 0x0, [0x9c, 0xffffa031, 0x7, 0x1aa, 0x7, 0x1, 0x9, 0x0, 0x8, 0x4, 0x5, 0x2, 0x4, 0x10000, 0x7f, 0x2]}], r3, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x2, @loopback, 0x6}, r1}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a]}, 0x40) 07:25:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x805a, 0x40}, 0x40) 07:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xa}, 0x40) 07:25:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x8}, 0x40) 07:25:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback, 0x10000000}, r1}}, 0x30) 07:25:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x8}, 0x40) 07:25:50 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x805a, 0x40}, 0x40) 07:25:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b]}, 0x40) 07:25:50 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xb}, 0x40) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x8, 0x8}, 0x40) 07:25:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x1001}, 0x40) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x805a, 0x40}, 0x40) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xc}, 0x40) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c]}, 0x40) 07:25:51 executing program 1: keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={0x0, 0xd1, 0x35}, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)="689887c57d61983301937f03f85064c0766b363774bafb1910736ae6b5e3025d31ac84c4c659abbc5f392801156715e1fc8e7c7469e64019ca3fb283db882d628323b5e0f649fd3e3a70712fa26fea97cf59125ff4229cc07b3415b5033159598072f5f337c81362fdd1e316ddb124ec757ab2177b9eb0f8ffac7001c8d85d5b7ca2d48a5ff01b80488ef6042802e805dd0b01edd33d082519844f7de385cae7a56ac0377c8dfba174e863cbcee2191309b9c6e38e7a50a9c34dc8997d4a3cfe964f1344cce5081916271dc753a430e7dd", &(0x7f0000000200)="7cafd652fc6949dbd95b146bfda36aeddd93a86fa9c723df6cbdd827a12278bc73b8d3629cf47f86641341ac7485fb77705cafdca3") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r2, 0x7ff, 0x0, 0x0, 0x0, @ib={0x1b, 0xddb, 0xbda449a, {"ae4cfa33a77dff3eec3785399c3899ff"}, 0xfff, 0x6}, @in6={0xa, 0x4e22, 0x10000, @mcast1, 0x7ff}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000840)={0x9, 0x108, 0xfa00, {r5, 0x80, "bc4cfe", "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"}}, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x3, {0xa, 0x4e20, 0x3, @remote, 0x7ff}, r6}}, 0x38) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r3}}, 0x30) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000600)) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x8}, 0x40) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xd}, 0x40) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x805a, 0x40}, 0x40) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x8}, 0x40) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d]}, 0x40) 07:25:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3e00, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x1, {0xa, 0x4e20, 0x6, @loopback, 0x400}, r4}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x90) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xe}, 0x40) 07:25:51 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x86}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x6, @private2, 0xfffffffc}, r1}}, 0x30) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r3 = getpid() syz_open_procfs(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000440)='net/nf_conntrack\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000080)) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/bnep\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r6, &(0x7f0000000340)={0xa, 0x4, 0xfa00, {r8}}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), r9, r2}}, 0x18) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x8}, 0x40) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x805a, 0x40}, 0x40) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e]}, 0x40) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xf}, 0x40) 07:25:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xffffffff, 0x7b77, "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", 0x7b, 0x0, 0x81, 0x6, 0x80, 0x9, 0x0, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x3, 0x4, "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", 0xe4, 0x6, 0x1, 0x6, 0xff, 0x40, 0x6}, r3}}, 0x120) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000600)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), r5, 0x9}}, 0x18) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21]}, 0x40) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x805a, 0x40}, 0x40) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x8}, 0x40) 07:25:51 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x10}, 0x40) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22]}, 0x40) 07:25:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', 0xffffffffffffffff) 07:25:51 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x805a, 0x40}, 0x40) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x8}, 0x40) 07:25:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x30) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @remote, 0x2}}}, 0x30) 07:25:51 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x8}, 0x40) 07:25:51 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001}, 0x40) 07:25:51 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}, 0x40) 07:25:51 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x11}, 0x40) 07:25:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1a1080, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x2}}, 0x18) 07:25:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001}, 0x40) 07:25:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40}, 0x40) 07:25:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x12}, 0x40) 07:25:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:25:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x1}}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r2, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x3, {"0935f6b06d371d4f63066e981bbcd845"}, 0xf23, 0x1, 0x1}, @in={0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x118) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000440)={0x8, 0x120, 0xfa00, {0x0, {0x5, 0x23f, "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", 0x1f, 0x1, 0x14, 0x0, 0x64, 0x1, 0x5, 0x1}, r2}}, 0x128) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r4}}, 0x30) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x4000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000007c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000780), r7}}, 0x18) 07:25:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x0, 0x5, 0x2200, 0x1001}, 0x40) 07:25:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x0, 0x40}, 0x40) 07:25:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x40) 07:25:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x13}, 0x40) 07:25:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:25:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001}, 0x40) 07:25:52 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a}, 0x40) 07:25:52 executing program 1: ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000000)={0x4001, 0x80000001, 0x8, 0x2}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x40) 07:25:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8}, 0x40) 07:25:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x14}, 0x40) 07:25:52 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r7}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r7, 0x12}}, 0x10) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0xffffffc1, 0xfa00, {r4, 0x1000000c}}, 0x10) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xfffe, 0x0, @loopback}, r0}}, 0x30) 07:25:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x40) 07:25:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001}, 0x40) 07:25:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xe}, 0x40) 07:25:52 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="beb7120131000a8db6e2c9426bed436374bfe392ad5de8aa5f236ce0aa7c427158fc4608500de21919c8270342f851f20ceff5251a66fc5cae2004b621e56550", 0x40}, {&(0x7f00000000c0)="bb4874c037077cfa54fe46d2688df96caa3fec1784cfeedeb83722083563b76b461cf2db4c5e522d9ff94b35b50d6198a43ecb404cde630b34a26f5ac83fb6255e557538de30a55833c86498629a9569f72f9480e74476ebf452a362b817545396add2e61a5b1a91abe746e61783139aabf864c312750c388855bc4bd0", 0x7d}, {&(0x7f0000000140)="ea3c65523aba031effc57746514e30c7123131e204f8bca8ee4ff4c62631547d30003c562a282f78532614a56acaf11ba083d745647183eff4beba011e473d7ae0f7aef83cd69ee3a78252717e4426d69156f177e0172e51a6eb483919a6a347fee5d574da2cdf05c1f0d73996af853c55a0e0db654c1fcfa7", 0x79}], 0x3, &(0x7f0000000200)=[@iv={0xa0, 0x117, 0x2, 0x8c, "564576ef02e72861995caf4a23c8a8d7f9743922161ad070fa28a7a4bd6179d164c7d8b6d92b28e97a74b77a715a2a608e0e338dc6059798bbe73e411ea388f89be67f47dfa7138e91b29dddaecd4de6a55cbc5dd92460cf35bbdd8d7360a2ba85a2f688eeeaf98d988423dc8a39114917daf9a18e59b1f92e11efad2b5e5b01596840a623791364df3d7245"}, @iv={0x68, 0x117, 0x2, 0x4e, "205722be15bea7d6f7fe268bce89a911d416af9873388a4f1fd02f0eccbd5cba2580b6b86b6af8ab9cee76b76161c91d631bbbb707834e6c269844571e7d021298d2e0ebbe1e340696f09f8e08ec"}, @op={0x18, 0x117, 0x3, 0x1}], 0x120, 0x4008804}, 0xc095) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3fffd, @private0}, r1}}, 0x30) 07:25:52 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x15}, 0x40) 07:25:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x0, 0x2200, 0x1001}, 0x40) 07:25:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001}, 0x40) 07:25:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x40) 07:25:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0xe}, 0x40) 07:25:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x16}, 0x40) 07:25:53 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a}, 0x40) 07:25:53 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x430000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, @ib={0x1b, 0x7, 0x38, {"b4f05aac77072876499c69f55c8ed83d"}, 0xffffffffffff083b, 0x7}}}, 0x118) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:53 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001}, 0x40) 07:25:53 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x40) 07:25:53 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x17}, 0x40) 07:25:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:54 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x18}, 0x40) 07:25:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x1001}, 0x40) 07:25:54 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r5}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r8, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r7, 0xe}}, 0x10) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r9, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r10}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x3, r10, 0xc, 0x0, @ib={0x1b, 0x7fff, 0x3, {"bd5d1532658cdc060a314625f01f3308"}, 0x3, 0x4, 0x2}}}, 0xa0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x40) 07:25:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200}, 0x40) 07:25:55 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a}, 0x40) 07:25:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x19}, 0x40) 07:25:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, r3}}, 0x18) 07:25:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x40) 07:25:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r5, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200}, 0x40) 07:25:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x40) 07:25:55 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200}, 0x40) 07:25:55 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:55 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x7dc}}, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x400002, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f00000000c0)={0x400000000}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) 07:25:55 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x1a}, 0x40) 07:25:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}, 0x40) 07:25:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x805a}, 0x40) 07:25:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}, 0x40) 07:25:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x13, 0x3, {"dfc51621b0418db151dac66c380ebaaf"}, 0x9, 0x54ec, 0x1}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7ff, @remote, 0x2}}}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x128, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x22, 0x0, [0x3ff, 0x3, 0x6, 0x80, 0x10001, 0x1, 0x5, 0x0, 0x10001, 0x5, 0x8000, 0x3, 0x37da, 0x1, 0x0, 0x5c1d]}, {0x0, 0x0, [0x7, 0x2, 0x9, 0xd6, 0x4, 0x3ff, 0x80000001, 0xff, 0x4, 0x7, 0xfe6, 0x7, 0x7fffffff, 0x9, 0x2bcccbd7, 0x4]}], r3, 0x1, 0x1, 0x90}}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r1}}, 0x30) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000140)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r5}) 07:25:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x1b}, 0x40) 07:25:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x17}, 0x40) 07:25:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x83, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e2a, 0x4, @mcast1, 0xe06}}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:56 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000080)={0x3f, 0x2, 0x1}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, r3}}, 0x30) 07:25:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x1c}, 0x40) 07:25:56 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}, 0x40) 07:25:56 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000012c0)={0x5, 0x5, 0x2200, 0x8, 0x40, 0xffffffffffffffff, 0x4}, 0x40) 07:25:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "bf690c074c140c5dc8e85c2fc7b739c81c202501ca473339cdeed504f9f0fc5472997b46bfbf96fa73f652603e95926e63a2d70217ee6f3207d24355274f4268183179beb3997326e1fcd61ba269c2472e21c6e0103320b126d067dd7593b475f6736efb5bc0e9a4ea7ac83526936336fd4232fcf6b83518b577d9426d276ccede0dd2031b21dba01037dbdf464c62865693dfe3bcd01c64056a498b4b6acf6e91a2cb0ec328e81e7fb63908f1e354ed08047e8410b2ae996d2aa5aa9651f9eb997699601b2dea0c3d3386b2c04de65003ff271de7d3548e97868eef057da582aa9524340b0baa88ad3f436cd4ce43ce59bc2905962c15950d4317174305bbb0", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f00000003c0)={0xf, 0x8}, 0xfffffffffffffeba) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0) 07:25:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000400)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, r1}}, 0x30) r2 = syz_open_procfs(0x0, &(0x7f0000000880)='coredump_filter\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x2, r4, 0x10, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0xa0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/timer_list\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x6, 0x118, 0xfa00, {{0xfffff3ae, 0x9, "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", 0x40, 0x0, 0x9, 0x37, 0x40, 0x6, 0x84, 0x2}}}, 0x120) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0xa040, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x0, r6, 0x10, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0xa0)