, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x240400d0}, 0x4000000) 05:56:45 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xc9000000, &(0x7f0000000000)) 05:56:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000040)={r5}) 05:56:45 executing program 5: r0 = mq_open(&(0x7f0000000180)='&\'\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xc9010000, &(0x7f0000000000)) 05:56:45 executing program 1: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xb9000000, &(0x7f0000000000)) 05:56:45 executing program 5: r0 = mq_open(&(0x7f0000000180)='&\'\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 05:56:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000580)="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", 0x1e1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x240400d0}, 0x4000000) 05:56:45 executing program 5: r0 = mq_open(&(0x7f0000000180)='&\'\x00', 0x0, 0x0, 0x0) mq_notify(r0, 0x0) 05:56:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xca000000, &(0x7f0000000000)) 05:56:45 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r6}) 05:56:45 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:45 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xca010000, &(0x7f0000000000)) 05:56:46 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x541880) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) socket$l2tp6(0xa, 0x2, 0x73) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x90082, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x9, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048844) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x8, 0x0, 0x6], 0x3, 0x450dad32f5312e21, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4850}, 0x240000c0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r6 = gettid() mq_open(&(0x7f00000004c0)='udp:syz2\x00', 0x800, 0x168, &(0x7f0000000500)={0x7, 0x0, 0x9, 0x9}) syz_open_procfs$namespace(r6, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000580)={&(0x7f0000000540)=[0x5838, 0x57f, 0x6, 0x2, 0x9], 0x5, 0x3f, 0x101, 0x3, 0x7fff, 0x6, 0x10001, {0x7, 0xff, 0x8, 0x7, 0x2, 0x3, 0x6, 0xfffe, 0x80, 0x7fff, 0x7, 0x9d7, 0x6, 0x97c, "bc1c580a0f0c40ebd3fadced7bab66ca63e9a5ee90c8cd5ee2cfb7fe386f5d5f"}}) capset(&(0x7f0000000140)={0x20071026, r6}, &(0x7f0000000180)={0x8, 0x100, 0x3, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r5}) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000140)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r6}) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcb000000, &(0x7f0000000000)) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 1: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x737e, 0x101) 05:56:46 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 1: syz_open_dev$dri(0x0, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x737e, 0x101) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcb010000, &(0x7f0000000000)) 05:56:46 executing program 2: syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x22000000) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000140)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000140)={r9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 05:56:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcc000000, &(0x7f0000000000)) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcc010000, &(0x7f0000000000)) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000140)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r6}) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcd000000, &(0x7f0000000000)) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 2: syz_open_dev$dri(&(0x7f0000000280), 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x2, 0x4402) syz_open_dev$dri(&(0x7f0000000000), 0x737e, 0x101) 05:56:46 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfe2, 0x1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000140)={r8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcd010000, &(0x7f0000000000)) 05:56:46 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x6463c73a5a92d7a5) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0xfe2, 0x1}) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xce000000, &(0x7f0000000000)) 05:56:46 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0xfe2, 0x1}) 05:56:46 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x6463c73a5a92d7a5) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xce010000, &(0x7f0000000000)) 05:56:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 1) 05:56:46 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x6463c73a5a92d7a5) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000340)=0x10) 05:56:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:46 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcf000000, &(0x7f0000000000)) [ 1276.981881] FAULT_INJECTION: forcing a failure. [ 1276.981881] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.046881] CPU: 1 PID: 18269 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1277.054791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1277.064185] Call Trace: [ 1277.066784] dump_stack+0x1fc/0x2ef [ 1277.070428] should_fail.cold+0xa/0xf [ 1277.074241] ? setup_fault_attr+0x200/0x200 [ 1277.078675] ? lock_acquire+0x170/0x3c0 [ 1277.082681] __should_failslab+0x115/0x180 [ 1277.086925] should_failslab+0x5/0x10 [ 1277.090734] kmem_cache_alloc_node+0x245/0x3b0 [ 1277.095333] __alloc_skb+0x71/0x560 [ 1277.098975] netlink_sendmsg+0x9f6/0xc50 [ 1277.103047] ? aa_af_perm+0x230/0x230 [ 1277.106854] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.110834] ? kernel_recvmsg+0x220/0x220 [ 1277.115006] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.118989] sock_sendmsg+0xc3/0x120 [ 1277.122708] ___sys_sendmsg+0x7bb/0x8e0 [ 1277.126693] ? check_preemption_disabled+0x41/0x280 [ 1277.131715] ? copy_msghdr_from_user+0x440/0x440 [ 1277.136476] ? __fget+0x32f/0x510 [ 1277.139951] ? lock_downgrade+0x720/0x720 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.144105] ? check_preemption_disabled+0x41/0x280 [ 1277.149130] ? check_preemption_disabled+0x41/0x280 [ 1277.154152] ? __fget+0x356/0x510 [ 1277.157611] ? do_dup2+0x450/0x450 [ 1277.161155] ? lock_downgrade+0x720/0x720 [ 1277.165312] ? vfs_write+0x3d7/0x540 [ 1277.169040] ? __fdget+0x1d0/0x230 [ 1277.172592] __x64_sys_sendmsg+0x132/0x220 [ 1277.176841] ? __sys_sendmsg+0x1b0/0x1b0 [ 1277.180903] ? vfs_write+0x393/0x540 [ 1277.184632] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1277.190006] ? trace_hardirqs_off_caller+0x6e/0x210 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.195028] ? do_syscall_64+0x21/0x620 [ 1277.199185] do_syscall_64+0xf9/0x620 [ 1277.202995] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1277.208207] RIP: 0033:0x7fb9d9359409 [ 1277.211920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1277.230828] RSP: 002b:00007fb9d7cce168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.238549] RAX: ffffffffffffffda RBX: 00007fb9d946bf80 RCX: 00007fb9d9359409 05:56:47 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x6463c73a5a92d7a5) socket$l2tp(0x2, 0x2, 0x73) 05:56:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.245820] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 1277.253095] RBP: 00007fb9d7cce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1277.260364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.267636] R13: 00007ffca8eb64ef R14: 00007fb9d7cce300 R15: 0000000000022000 05:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 2) 05:56:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:47 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xcf010000, &(0x7f0000000000)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x6463c73a5a92d7a5) 05:56:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000300), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x4, 0x70bd28, 0x25dfcbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x10001}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfffa}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7fffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40800) 05:56:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:47 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd0000000, &(0x7f0000000000)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.452148] FAULT_INJECTION: forcing a failure. [ 1277.452148] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.488304] CPU: 1 PID: 18309 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1277.496225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1277.505582] Call Trace: [ 1277.508183] dump_stack+0x1fc/0x2ef [ 1277.511821] should_fail.cold+0xa/0xf [ 1277.515633] ? setup_fault_attr+0x200/0x200 [ 1277.519967] ? lock_acquire+0x170/0x3c0 [ 1277.523961] __should_failslab+0x115/0x180 [ 1277.528206] should_failslab+0x5/0x10 [ 1277.532016] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 1277.537132] __kmalloc_node_track_caller+0x38/0x70 [ 1277.542074] __alloc_skb+0xae/0x560 [ 1277.545714] netlink_sendmsg+0x9f6/0xc50 [ 1277.549784] ? aa_af_perm+0x230/0x230 [ 1277.553589] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.557575] ? kernel_recvmsg+0x220/0x220 [ 1277.561739] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.565722] sock_sendmsg+0xc3/0x120 [ 1277.569440] ___sys_sendmsg+0x7bb/0x8e0 [ 1277.573773] ? check_preemption_disabled+0x41/0x280 [ 1277.578796] ? copy_msghdr_from_user+0x440/0x440 [ 1277.583560] ? __fget+0x32f/0x510 [ 1277.587022] ? lock_downgrade+0x720/0x720 [ 1277.591178] ? check_preemption_disabled+0x41/0x280 [ 1277.596228] ? check_preemption_disabled+0x41/0x280 [ 1277.601254] ? __fget+0x356/0x510 [ 1277.604717] ? do_dup2+0x450/0x450 [ 1277.608256] ? lock_downgrade+0x720/0x720 [ 1277.612409] ? vfs_write+0x3d7/0x540 [ 1277.616132] ? __fdget+0x1d0/0x230 [ 1277.619687] __x64_sys_sendmsg+0x132/0x220 [ 1277.623935] ? __sys_sendmsg+0x1b0/0x1b0 [ 1277.628000] ? vfs_write+0x393/0x540 [ 1277.631732] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1277.637102] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1277.642130] ? do_syscall_64+0x21/0x620 [ 1277.646113] do_syscall_64+0xf9/0x620 05:56:47 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd0010000, &(0x7f0000000000)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.649937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1277.655133] RIP: 0033:0x7fb9d9359409 [ 1277.658853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1277.677758] RSP: 002b:00007fb9d7cce168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1277.685473] RAX: ffffffffffffffda RBX: 00007fb9d946bf80 RCX: 00007fb9d9359409 [ 1277.692752] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 1277.700025] RBP: 00007fb9d7cce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1277.707296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1277.714576] R13: 00007ffca8eb64ef R14: 00007fb9d7cce300 R15: 0000000000022000 05:56:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 3) 05:56:47 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000440)=0x7) 05:56:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:47 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd1000000, &(0x7f0000000000)) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:47 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) 05:56:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1277.847780] FAULT_INJECTION: forcing a failure. [ 1277.847780] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.879344] CPU: 1 PID: 18341 Comm: syz-executor.2 Not tainted 4.19.211-syzkaller #0 [ 1277.887265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1277.896710] Call Trace: [ 1277.899306] dump_stack+0x1fc/0x2ef [ 1277.902947] should_fail.cold+0xa/0xf [ 1277.906757] ? setup_fault_attr+0x200/0x200 [ 1277.911091] ? lock_downgrade+0x720/0x720 [ 1277.915252] ? check_preemption_disabled+0x41/0x280 [ 1277.920280] __should_failslab+0x115/0x180 [ 1277.924788] should_failslab+0x5/0x10 [ 1277.928603] kmem_cache_alloc+0x3f/0x370 [ 1277.932675] skb_clone+0x151/0x3d0 [ 1277.936223] netlink_deliver_tap+0x955/0xb00 [ 1277.940651] netlink_unicast+0x545/0x690 [ 1277.944807] ? netlink_sendskb+0x110/0x110 [ 1277.949043] ? _copy_from_iter_full+0x229/0x7c0 [ 1277.953721] ? __phys_addr_symbol+0x2c/0x70 [ 1277.958060] ? __check_object_size+0x17b/0x3e0 [ 1277.962656] netlink_sendmsg+0x6c3/0xc50 [ 1277.966730] ? aa_af_perm+0x230/0x230 [ 1277.970531] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.974508] ? kernel_recvmsg+0x220/0x220 [ 1277.978673] ? nlmsg_notify+0x1f0/0x1f0 [ 1277.982741] sock_sendmsg+0xc3/0x120 [ 1277.986460] ___sys_sendmsg+0x7bb/0x8e0 [ 1277.990447] ? check_preemption_disabled+0x41/0x280 05:56:47 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd1010000, &(0x7f0000000000)) [ 1277.995476] ? copy_msghdr_from_user+0x440/0x440 [ 1278.000241] ? __fget+0x32f/0x510 [ 1278.003705] ? lock_downgrade+0x720/0x720 [ 1278.007862] ? check_preemption_disabled+0x41/0x280 [ 1278.012996] ? check_preemption_disabled+0x41/0x280 [ 1278.018019] ? __fget+0x356/0x510 [ 1278.021487] ? do_dup2+0x450/0x450 [ 1278.025551] ? lock_downgrade+0x720/0x720 [ 1278.029705] ? vfs_write+0x3d7/0x540 [ 1278.033434] ? __fdget+0x1d0/0x230 [ 1278.036985] __x64_sys_sendmsg+0x132/0x220 [ 1278.041226] ? __sys_sendmsg+0x1b0/0x1b0 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1278.045287] ? vfs_write+0x393/0x540 [ 1278.049023] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1278.054398] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1278.059425] ? do_syscall_64+0x21/0x620 [ 1278.063410] do_syscall_64+0xf9/0x620 [ 1278.067225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1278.072420] RIP: 0033:0x7fb9d9359409 [ 1278.076137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1278.095040] RSP: 002b:00007fb9d7cce168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1278.102847] RAX: ffffffffffffffda RBX: 00007fb9d946bf80 RCX: 00007fb9d9359409 [ 1278.110121] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 1278.117392] RBP: 00007fb9d7cce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1278.124685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.131957] R13: 00007ffca8eb64ef R14: 00007fb9d7cce300 R15: 0000000000022000 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) (fail_nth: 4) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd2000000, &(0x7f0000000000)) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd2010000, &(0x7f0000000000)) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r2, 0xc0245720, &(0x7f0000000380)={0x1}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd3000000, &(0x7f0000000000)) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2500000c0010000200000000000000050012080800e8f70c0900"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd3010000, &(0x7f0000000000)) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x2, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd4000000, &(0x7f0000000000)) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x3, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) select(0x40, &(0x7f0000000000)={0x3, 0x5}, 0x0, &(0x7f0000000480)={0x800, 0x0, 0x20000000000}, &(0x7f0000000100)={0x0, r1/1000+10000}) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd4010000, &(0x7f0000000000)) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) clock_gettime(0x0, &(0x7f00000000c0)) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd5000000, &(0x7f0000000000)) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x7, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) read$midi(0xffffffffffffffff, &(0x7f00000002c0)=""/41, 0x29) 05:56:48 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd5010000, &(0x7f0000000000)) 05:56:48 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:48 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:48 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000400)=0x1, 0x4) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd6000000, &(0x7f0000000000)) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:49 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xe, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 1: bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd6010000, &(0x7f0000000000)) 05:56:49 executing program 5: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, 0x0) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd7000000, &(0x7f0000000000)) 05:56:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x60, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd7010000, &(0x7f0000000000)) 05:56:49 executing program 1: socketpair(0x0, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000140)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd8000000, &(0x7f0000000000)) 05:56:49 executing program 1: socketpair(0x0, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x300, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd8010000, &(0x7f0000000000)) 05:56:49 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 0: syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x700, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 1: socketpair(0x0, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd9000000, &(0x7f0000000000)) 05:56:49 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xe00, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xd9010000, &(0x7f0000000000)) 05:56:49 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x82, 0x204c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000001c0)={&(0x7f00000002c0)="c8984520d0f2734ceed5c63c7e1c71fab03b28eaebf7784ce4f92e0d46f4c03e64c52943418df6f226c174103a98d31d13ac71e91e649ef9d9e8e5042f2966f45e788c9fedda1801e360ba3c5db4143141c0bcbcf8fb0c364373bb1a5103710c31b2f1b5de351b173853ff18bf5049384add6b907cf55d9986d7306ff50e237cae9575a7582e9e6a413ab2f9c448bad607deb82a6b6063f5ace625b05f04557b0448ede7cb44cb5574cde448a39ff6c327cc1e5efe8db0fa649e30015e570192bfab29", 0xc3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf00, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xda000000, &(0x7f0000000000)) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:49 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:49 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x4b72, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xda010000, &(0x7f0000000000)) 05:56:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 05:56:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf00, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:49 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x6000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdb000000, &(0x7f0000000000)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 05:56:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf00, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x724b, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdb010000, &(0x7f0000000000)) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 05:56:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x6000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdc000000, &(0x7f0000000000)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10000}) 05:56:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (fail_nth: 1) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x3f, 0x0) 05:56:50 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x30000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10000}) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x3f, 0x0) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdc010000, &(0x7f0000000000)) 05:56:50 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf0ffff, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdd000000, &(0x7f0000000000)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10000}) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x3f, 0x0) 05:56:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x2, &(0x7f0000000040)={r1}) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x1000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdd010000, &(0x7f0000000000)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x0, 0x10000}) 05:56:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x5421, &(0x7f0000000040)={r1}) 05:56:50 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 1) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x2000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:50 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xde000000, &(0x7f0000000000)) 05:56:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x0, 0x10000}) 05:56:50 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x5450, &(0x7f0000000040)={r1}) 05:56:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x3000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1280.738277] FAULT_INJECTION: forcing a failure. [ 1280.738277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1280.814262] CPU: 1 PID: 18696 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1280.822175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1280.831533] Call Trace: [ 1280.834138] dump_stack+0x1fc/0x2ef [ 1280.837771] should_fail.cold+0xa/0xf [ 1280.841579] ? lock_acquire+0x170/0x3c0 [ 1280.845559] ? setup_fault_attr+0x200/0x200 [ 1280.849925] __alloc_pages_nodemask+0x239/0x2890 [ 1280.854700] ? __lock_acquire+0x6de/0x3ff0 [ 1280.858953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.863801] ? mark_held_locks+0xf0/0xf0 [ 1280.867884] ? __lock_acquire+0x6de/0x3ff0 [ 1280.872138] alloc_pages_current+0x193/0x2a0 [ 1280.876551] ? mark_held_locks+0xf0/0xf0 [ 1280.880625] __pmd_alloc+0x37/0x440 [ 1280.884267] __handle_mm_fault+0x1760/0x41c0 [ 1280.888690] ? vm_insert_page+0x9c0/0x9c0 [ 1280.892852] ? __lock_acquire+0x6de/0x3ff0 [ 1280.897110] ? check_preemption_disabled+0x41/0x280 [ 1280.902140] handle_mm_fault+0x436/0xb10 [ 1280.906213] __do_page_fault+0x68e/0xd60 [ 1280.910288] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1280.915313] ? spurious_fault+0x840/0x840 [ 1280.919463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1280.924321] page_fault+0x1e/0x30 [ 1280.927782] RIP: 0010:__put_user_4+0x1c/0x30 [ 1280.932198] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1280.951107] RSP: 0018:ffff888086c8fe28 EFLAGS: 00050297 [ 1280.956478] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1280.963755] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1280.971025] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1280.978308] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1280.985737] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1280.993032] ? __sys_socketpair+0xfb/0x570 [ 1280.997280] __sys_socketpair+0x107/0x570 [ 1281.001438] ? __ia32_sys_socket+0xb0/0xb0 [ 1281.005683] ? ksys_write+0x1c8/0x2a0 [ 1281.009493] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xde010000, &(0x7f0000000000)) 05:56:50 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdf000000, &(0x7f0000000000)) [ 1281.014866] __x64_sys_socketpair+0x93/0xf0 [ 1281.019198] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1281.023785] do_syscall_64+0xf9/0x620 [ 1281.027602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1281.032800] RIP: 0033:0x7fbf5b897409 [ 1281.036516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1281.055418] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 05:56:51 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xdf010000, &(0x7f0000000000)) 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x0, 0x10000}) 05:56:51 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f00000003c0)) 05:56:51 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 2) 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x5451, &(0x7f0000000040)={r1}) 05:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x4000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1281.063137] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1281.070588] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1281.077863] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.085141] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1281.092412] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47}) 05:56:51 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f00000003c0)) 05:56:51 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe0000000, &(0x7f0000000000)) 05:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x7000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x5452, &(0x7f0000000040)={r1}) [ 1281.251634] FAULT_INJECTION: forcing a failure. [ 1281.251634] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.310353] CPU: 0 PID: 18736 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1281.318264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1281.327618] Call Trace: [ 1281.330227] dump_stack+0x1fc/0x2ef [ 1281.333872] should_fail.cold+0xa/0xf [ 1281.337686] ? setup_fault_attr+0x200/0x200 [ 1281.342015] ? lock_acquire+0x170/0x3c0 [ 1281.346006] __should_failslab+0x115/0x180 [ 1281.350254] should_failslab+0x5/0x10 [ 1281.354061] kmem_cache_alloc+0x277/0x370 [ 1281.358238] __pmd_alloc+0xbb/0x440 [ 1281.361874] __handle_mm_fault+0x1760/0x41c0 [ 1281.366292] ? vm_insert_page+0x9c0/0x9c0 [ 1281.370446] ? __lock_acquire+0x6de/0x3ff0 [ 1281.374704] ? check_preemption_disabled+0x41/0x280 [ 1281.379733] handle_mm_fault+0x436/0xb10 [ 1281.383805] __do_page_fault+0x68e/0xd60 [ 1281.387876] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1281.392902] ? spurious_fault+0x840/0x840 [ 1281.397055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1281.401909] page_fault+0x1e/0x30 [ 1281.405373] RIP: 0010:__put_user_4+0x1c/0x30 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47}) 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47}) [ 1281.409788] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1281.428692] RSP: 0018:ffff88809fd17e28 EFLAGS: 00050297 [ 1281.434060] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1281.441332] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1281.448604] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x5460, &(0x7f0000000040)={r1}) [ 1281.455877] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1281.463154] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1281.470446] ? __sys_socketpair+0xfb/0x570 [ 1281.474700] __sys_socketpair+0x107/0x570 [ 1281.478862] ? __ia32_sys_socket+0xb0/0xb0 [ 1281.483103] ? ksys_write+0x1c8/0x2a0 [ 1281.486935] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1281.492316] __x64_sys_socketpair+0x93/0xf0 [ 1281.496651] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1281.501241] do_syscall_64+0xf9/0x620 [ 1281.505055] entry_SYSCALL_64_after_hwframe+0x49/0xbe 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x40049409, &(0x7f0000000040)={r1}) [ 1281.510265] RIP: 0033:0x7fbf5b897409 [ 1281.513984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1281.532889] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1281.540610] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1281.547884] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1281.556465] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.563742] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1281.571017] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:51 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 3) 05:56:51 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe0010000, &(0x7f0000000000)) 05:56:51 executing program 0: socketpair(0x26, 0x0, 0x0, &(0x7f00000003c0)) 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (fail_nth: 1) 05:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x8000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0x4020940d, &(0x7f0000000040)={r1}) 05:56:51 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe1000000, &(0x7f0000000000)) 05:56:51 executing program 0: socketpair(0x26, 0x5, 0x0, 0x0) 05:56:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xe000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc0045878, &(0x7f0000000040)={r1}) [ 1281.698249] FAULT_INJECTION: forcing a failure. [ 1281.698249] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.772484] CPU: 1 PID: 18776 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1281.780399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1281.789758] Call Trace: [ 1281.792360] dump_stack+0x1fc/0x2ef [ 1281.796005] should_fail.cold+0xa/0xf [ 1281.799853] ? setup_fault_attr+0x200/0x200 [ 1281.804224] ? lock_acquire+0x170/0x3c0 [ 1281.808245] __should_failslab+0x115/0x180 [ 1281.812497] should_failslab+0x5/0x10 [ 1281.816311] kmem_cache_alloc+0x277/0x370 [ 1281.820476] __anon_vma_prepare+0x5d/0x560 [ 1281.824729] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 1281.829934] ? lock_downgrade+0x720/0x720 [ 1281.834101] ? lock_acquire+0x170/0x3c0 [ 1281.838096] ? __pmd_alloc+0x147/0x440 [ 1281.842128] ? prep_transhuge_page+0xa0/0xa0 [ 1281.846551] ? do_raw_spin_unlock+0x171/0x230 [ 1281.851055] ? _raw_spin_unlock+0x29/0x40 [ 1281.855221] __handle_mm_fault+0x289c/0x41c0 [ 1281.859648] ? vm_insert_page+0x9c0/0x9c0 [ 1281.863805] ? __lock_acquire+0x6de/0x3ff0 [ 1281.868058] ? check_preemption_disabled+0x41/0x280 05:56:51 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe1010000, &(0x7f0000000000)) [ 1281.873093] handle_mm_fault+0x436/0xb10 [ 1281.877171] __do_page_fault+0x68e/0xd60 [ 1281.881251] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1281.886278] ? spurious_fault+0x840/0x840 [ 1281.890438] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1281.895302] page_fault+0x1e/0x30 [ 1281.898770] RIP: 0010:__put_user_4+0x1c/0x30 [ 1281.903274] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1281.922181] RSP: 0018:ffff888094907e28 EFLAGS: 00050297 [ 1281.927638] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1281.934956] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1281.942248] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1281.949526] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1281.956804] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1281.964100] ? __sys_socketpair+0xfb/0x570 [ 1281.968352] __sys_socketpair+0x107/0x570 [ 1281.972515] ? __ia32_sys_socket+0xb0/0xb0 [ 1281.976763] ? ksys_write+0x1c8/0x2a0 [ 1281.980587] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1281.985983] __x64_sys_socketpair+0x93/0xf0 [ 1281.990325] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1281.995007] do_syscall_64+0xf9/0x620 [ 1281.998825] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.004021] RIP: 0033:0x7fbf5b897409 05:56:52 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 4) 05:56:52 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe2000000, &(0x7f0000000000)) 05:56:52 executing program 0: socketpair(0x26, 0x5, 0x0, 0x0) 05:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc0045878, &(0x7f0000000040)={r1}) 05:56:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10003}) mq_open(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0, &(0x7f0000000040)={0x20, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa793}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x81], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000140)=[0x101], &(0x7f0000000180)=[0x8, 0x3ff, 0x84a, 0x1000, 0x9, 0x54, 0x8], &(0x7f00000001c0)=[0x400, 0x67, 0x5, 0x1, 0x3]}) [ 1282.007746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1282.026738] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1282.034461] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1282.041732] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1282.049007] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.056286] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1282.063564] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x60000000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464c9, &(0x7f0000000040)={r1}) 05:56:52 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe2010000, &(0x7f0000000000)) 05:56:52 executing program 0: socketpair(0x26, 0x5, 0x0, 0x0) 05:56:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10003}) (async) mq_open(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0, &(0x7f0000000040)={0x20, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa793}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x81], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000140)=[0x101], &(0x7f0000000180)=[0x8, 0x3ff, 0x84a, 0x1000, 0x9, 0x54, 0x8], &(0x7f00000001c0)=[0x400, 0x67, 0x5, 0x1, 0x3]}) [ 1282.187063] FAULT_INJECTION: forcing a failure. [ 1282.187063] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.257771] CPU: 0 PID: 18816 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1282.265779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1282.275158] Call Trace: [ 1282.277766] dump_stack+0x1fc/0x2ef [ 1282.281414] should_fail.cold+0xa/0xf [ 1282.285233] ? setup_fault_attr+0x200/0x200 [ 1282.289563] ? lock_acquire+0x170/0x3c0 [ 1282.293566] __should_failslab+0x115/0x180 [ 1282.297808] should_failslab+0x5/0x10 [ 1282.301623] kmem_cache_alloc+0x277/0x370 [ 1282.305784] __anon_vma_prepare+0x2d3/0x560 [ 1282.310119] do_huge_pmd_anonymous_page+0x106e/0x1e60 [ 1282.315328] ? lock_downgrade+0x720/0x720 [ 1282.319496] ? lock_acquire+0x170/0x3c0 [ 1282.323479] ? __pmd_alloc+0x147/0x440 [ 1282.327375] ? prep_transhuge_page+0xa0/0xa0 [ 1282.331790] ? do_raw_spin_unlock+0x171/0x230 [ 1282.336294] ? _raw_spin_unlock+0x29/0x40 [ 1282.340551] __handle_mm_fault+0x289c/0x41c0 [ 1282.345060] ? vm_insert_page+0x9c0/0x9c0 [ 1282.349212] ? __lock_acquire+0x6de/0x3ff0 [ 1282.353467] ? check_preemption_disabled+0x41/0x280 [ 1282.358493] handle_mm_fault+0x436/0xb10 [ 1282.362568] __do_page_fault+0x68e/0xd60 [ 1282.366640] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1282.371669] ? spurious_fault+0x840/0x840 [ 1282.375821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1282.380678] page_fault+0x1e/0x30 [ 1282.384139] RIP: 0010:__put_user_4+0x1c/0x30 [ 1282.388546] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1282.407537] RSP: 0018:ffff88809999fe28 EFLAGS: 00050297 [ 1282.412909] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1282.420189] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1282.427471] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1282.434749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1282.442024] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1282.449312] ? __sys_socketpair+0xfb/0x570 [ 1282.453564] __sys_socketpair+0x107/0x570 05:56:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc0189436, &(0x7f0000000040)={r1}) [ 1282.457718] ? __ia32_sys_socket+0xb0/0xb0 [ 1282.461967] ? ksys_write+0x1c8/0x2a0 [ 1282.465781] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1282.471186] __x64_sys_socketpair+0x93/0xf0 [ 1282.475514] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1282.480101] do_syscall_64+0xf9/0x620 [ 1282.483912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.489110] RIP: 0033:0x7fbf5b897409 [ 1282.492827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1282.511726] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1282.519531] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1282.526803] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1282.534076] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1282.541349] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1282.548622] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:52 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 5) 05:56:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc020660b, &(0x7f0000000040)={r1}) 05:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x724b0000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10003}) (async) mq_open(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80, 0x0, &(0x7f0000000040)={0x20, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa793}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x81], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000200)={0x6, 0x1, &(0x7f0000000140)=[0x101], &(0x7f0000000180)=[0x8, 0x3ff, 0x84a, 0x1000, 0x9, 0x54, 0x8], &(0x7f00000001c0)=[0x400, 0x67, 0x5, 0x1, 0x3]}) 05:56:52 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe3000000, &(0x7f0000000000)) 05:56:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc0045878, &(0x7f0000000040)={r1}) 05:56:52 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe3010000, &(0x7f0000000000)) 05:56:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="de7a0a50931645581592eb85d395f8a264e1a028ba83a2f9d7e23a02d4233d60cff40a787eb1b29e132a4dc83dcfcff7d98ad563dcde647817cabd991b449de6499ffc8e526bc6faf3362038e265dff18e6e78fcfaf291e5783855652621cc83d729e7", 0x63, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r3, 0xf3, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:52 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x9, 0x228c000, 0x800}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8000, 0x0, 0x1}) 05:56:52 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) (fail_nth: 1) 05:56:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x9effffff, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1282.685967] FAULT_INJECTION: forcing a failure. [ 1282.685967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1282.748968] CPU: 0 PID: 18859 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1282.756879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1282.766237] Call Trace: [ 1282.768840] dump_stack+0x1fc/0x2ef [ 1282.772484] should_fail.cold+0xa/0xf [ 1282.776357] ? setup_fault_attr+0x200/0x200 [ 1282.780707] __alloc_pages_nodemask+0x239/0x2890 [ 1282.785481] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1282.790900] ? mark_held_locks+0xf0/0xf0 [ 1282.794993] ? mark_held_locks+0xf0/0xf0 [ 1282.799076] ? __lock_acquire+0x6de/0x3ff0 [ 1282.803334] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.808203] ? __anon_vma_prepare+0x2a6/0x560 [ 1282.812714] ? lock_downgrade+0x720/0x720 [ 1282.816875] ? lock_downgrade+0x720/0x720 [ 1282.821034] ? __anon_vma_prepare+0xc2/0x560 [ 1282.825455] alloc_pages_vma+0x461/0x780 [ 1282.829532] do_huge_pmd_anonymous_page+0x3b4/0x1e60 [ 1282.834646] ? lock_downgrade+0x720/0x720 [ 1282.838798] ? lock_acquire+0x170/0x3c0 [ 1282.842780] ? __pmd_alloc+0x147/0x440 [ 1282.846677] ? prep_transhuge_page+0xa0/0xa0 [ 1282.851091] ? do_raw_spin_unlock+0x171/0x230 [ 1282.855592] ? _raw_spin_unlock+0x29/0x40 [ 1282.859752] __handle_mm_fault+0x289c/0x41c0 [ 1282.864173] ? vm_insert_page+0x9c0/0x9c0 [ 1282.868326] ? __lock_acquire+0x6de/0x3ff0 [ 1282.872579] ? check_preemption_disabled+0x41/0x280 [ 1282.877607] handle_mm_fault+0x436/0xb10 [ 1282.881677] __do_page_fault+0x68e/0xd60 [ 1282.885753] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1282.890874] ? spurious_fault+0x840/0x840 [ 1282.892776] FAULT_INJECTION: forcing a failure. [ 1282.892776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1282.895021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1282.895045] page_fault+0x1e/0x30 [ 1282.895058] RIP: 0010:__put_user_4+0x1c/0x30 [ 1282.895070] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1282.895077] RSP: 0018:ffff88807bf97e28 EFLAGS: 00050297 [ 1282.944195] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1282.951475] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1282.958737] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1282.966043] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1282.973311] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1282.980593] ? __sys_socketpair+0xfb/0x570 [ 1282.984829] __sys_socketpair+0x107/0x570 [ 1282.988985] ? __ia32_sys_socket+0xb0/0xb0 [ 1282.993219] ? ksys_write+0x1c8/0x2a0 [ 1282.997015] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1283.002394] __x64_sys_socketpair+0x93/0xf0 [ 1283.006732] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1283.011311] do_syscall_64+0xf9/0x620 [ 1283.015113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1283.020329] RIP: 0033:0x7fbf5b897409 [ 1283.024036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 05:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xf0ffffff, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1283.042936] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1283.050640] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1283.057897] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1283.065155] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.072412] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1283.079667] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 [ 1283.086947] CPU: 1 PID: 18880 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1283.095021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1283.104400] Call Trace: [ 1283.106996] dump_stack+0x1fc/0x2ef [ 1283.110636] should_fail.cold+0xa/0xf [ 1283.114452] ? lock_acquire+0x170/0x3c0 [ 1283.118434] ? setup_fault_attr+0x200/0x200 [ 1283.122771] __alloc_pages_nodemask+0x239/0x2890 [ 1283.127540] ? __lock_acquire+0x6de/0x3ff0 [ 1283.131797] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.136642] ? mark_held_locks+0xf0/0xf0 [ 1283.140724] ? __lock_acquire+0x6de/0x3ff0 [ 1283.144977] alloc_pages_current+0x193/0x2a0 [ 1283.149390] ? mark_held_locks+0xf0/0xf0 [ 1283.153461] __pmd_alloc+0x37/0x440 [ 1283.157096] __handle_mm_fault+0x1760/0x41c0 [ 1283.161516] ? vm_insert_page+0x9c0/0x9c0 [ 1283.165667] ? __lock_acquire+0x6de/0x3ff0 [ 1283.169920] ? check_preemption_disabled+0x41/0x280 [ 1283.174948] handle_mm_fault+0x436/0xb10 [ 1283.179022] __do_page_fault+0x68e/0xd60 [ 1283.183098] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1283.188120] ? spurious_fault+0x840/0x840 [ 1283.192278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1283.197138] page_fault+0x1e/0x30 [ 1283.200599] RIP: 0010:__put_user_4+0x1c/0x30 [ 1283.205007] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1283.223910] RSP: 0018:ffff88809e18fe28 EFLAGS: 00050297 [ 1283.229282] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1283.236565] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1283.243927] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1283.251205] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1283.258478] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1283.265760] ? __sys_socketpair+0xfb/0x570 [ 1283.269983] __sys_socketpair+0x107/0x570 [ 1283.274123] ? __ia32_sys_socket+0xb0/0xb0 [ 1283.278353] ? ksys_write+0x1c8/0x2a0 [ 1283.282152] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1283.287625] __x64_sys_socketpair+0x93/0xf0 [ 1283.291935] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1283.296502] do_syscall_64+0xf9/0x620 [ 1283.300289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1283.305464] RIP: 0033:0x7efd48e3a409 [ 1283.309160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.328043] RSP: 002b:00007efd477af168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1283.335745] RAX: ffffffffffffffda RBX: 00007efd48f4cf80 RCX: 00007efd48e3a409 [ 1283.342997] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 05:56:53 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 6) 05:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xfcffffff, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:53 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe4000000, &(0x7f0000000000)) 05:56:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x9, 0x228c000, 0x800}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8000, 0x0, 0x1}) 05:56:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="de7a0a50931645581592eb85d395f8a264e1a028ba83a2f9d7e23a02d4233d60cff40a787eb1b29e132a4dc83dcfcff7d98ad563dcde647817cabd991b449de6499ffc8e526bc6faf3362038e265dff18e6e78fcfaf291e5783855652621cc83d729e7", 0x63, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r3, 0xf3, &(0x7f00000001c0)=""/243}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:53 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) (fail_nth: 2) [ 1283.350287] RBP: 00007efd477af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.357542] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1283.364802] R13: 00007ffe4ad0591f R14: 00007efd477af300 R15: 0000000000022000 05:56:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xfffff000, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="de7a0a50931645581592eb85d395f8a264e1a028ba83a2f9d7e23a02d4233d60cff40a787eb1b29e132a4dc83dcfcff7d98ad563dcde647817cabd991b449de6499ffc8e526bc6faf3362038e265dff18e6e78fcfaf291e5783855652621cc83d729e7", 0x63, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r3, 0xf3, &(0x7f00000001c0)=""/243}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 32) 05:56:53 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x0, 0x9, 0x228c000, 0x800}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x8000, 0x0, 0x1}) (rerun: 32) [ 1283.466115] FAULT_INJECTION: forcing a failure. [ 1283.466115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:56:53 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe4010000, &(0x7f0000000000)) [ 1283.518052] CPU: 1 PID: 18903 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1283.525968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1283.526706] FAULT_INJECTION: forcing a failure. [ 1283.526706] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.535319] Call Trace: [ 1283.535343] dump_stack+0x1fc/0x2ef [ 1283.535363] should_fail.cold+0xa/0xf [ 1283.535379] ? lock_acquire+0x170/0x3c0 [ 1283.535394] ? setup_fault_attr+0x200/0x200 [ 1283.535417] __alloc_pages_nodemask+0x239/0x2890 [ 1283.535441] ? get_mem_cgroup_from_mm+0x135/0x440 [ 1283.535466] ? check_preemption_disabled+0x41/0x280 [ 1283.579527] ? mem_cgroup_oom_trylock+0x220/0x220 [ 1283.584390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.589238] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.594093] ? mem_cgroup_from_task+0x120/0x120 [ 1283.598784] ? lock_downgrade+0x720/0x720 [ 1283.602943] ? check_preemption_disabled+0x41/0x280 [ 1283.607976] ? check_preemption_disabled+0x41/0x280 [ 1283.613004] alloc_pages_current+0x193/0x2a0 [ 1283.617421] pte_alloc_one+0x16/0x190 [ 1283.621237] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 1283.626344] ? lock_downgrade+0x720/0x720 [ 1283.630495] ? lock_acquire+0x170/0x3c0 [ 1283.634478] ? __pmd_alloc+0x147/0x440 [ 1283.638373] ? prep_transhuge_page+0xa0/0xa0 [ 1283.642786] ? do_raw_spin_unlock+0x171/0x230 [ 1283.647300] ? _raw_spin_unlock+0x29/0x40 [ 1283.651468] __handle_mm_fault+0x289c/0x41c0 [ 1283.655890] ? vm_insert_page+0x9c0/0x9c0 [ 1283.660041] ? __lock_acquire+0x6de/0x3ff0 [ 1283.664288] ? check_preemption_disabled+0x41/0x280 [ 1283.669321] handle_mm_fault+0x436/0xb10 [ 1283.673390] __do_page_fault+0x68e/0xd60 [ 1283.677463] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1283.682479] ? spurious_fault+0x840/0x840 [ 1283.686628] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1283.691481] page_fault+0x1e/0x30 [ 1283.694942] RIP: 0010:__put_user_4+0x1c/0x30 [ 1283.699375] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1283.718282] RSP: 0018:ffff888094a4fe28 EFLAGS: 00050297 [ 1283.723651] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1283.730925] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1283.738205] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1283.745486] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1283.752768] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1283.760146] ? __sys_socketpair+0xfb/0x570 [ 1283.764391] __sys_socketpair+0x107/0x570 [ 1283.768545] ? __ia32_sys_socket+0xb0/0xb0 [ 1283.772779] ? ksys_write+0x1c8/0x2a0 [ 1283.776586] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1283.781961] __x64_sys_socketpair+0x93/0xf0 [ 1283.786292] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1283.790881] do_syscall_64+0xf9/0x620 [ 1283.794694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1283.799890] RIP: 0033:0x7fbf5b897409 [ 1283.803607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1283.822511] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1283.830226] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1283.837495] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1283.844768] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.852037] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1283.859305] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 [ 1283.890697] CPU: 0 PID: 18909 Comm: syz-executor.0 Not tainted 4.19.211-syzkaller #0 [ 1283.898609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1283.907972] Call Trace: [ 1283.910573] dump_stack+0x1fc/0x2ef [ 1283.914222] should_fail.cold+0xa/0xf [ 1283.918042] ? setup_fault_attr+0x200/0x200 [ 1283.922370] ? lock_acquire+0x170/0x3c0 [ 1283.926357] __should_failslab+0x115/0x180 [ 1283.930603] should_failslab+0x5/0x10 [ 1283.934408] kmem_cache_alloc+0x277/0x370 [ 1283.938575] __pmd_alloc+0xbb/0x440 [ 1283.942219] __handle_mm_fault+0x1760/0x41c0 [ 1283.946643] ? vm_insert_page+0x9c0/0x9c0 [ 1283.950806] ? __lock_acquire+0x6de/0x3ff0 [ 1283.955063] ? check_preemption_disabled+0x41/0x280 [ 1283.960102] handle_mm_fault+0x436/0xb10 [ 1283.964176] __do_page_fault+0x68e/0xd60 [ 1283.968252] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1283.973273] ? spurious_fault+0x840/0x840 [ 1283.973612] FAULT_INJECTION: forcing a failure. [ 1283.973612] name failslab, interval 1, probability 0, space 0, times 0 [ 1283.977421] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1283.977443] page_fault+0x1e/0x30 [ 1283.977464] RIP: 0010:__put_user_4+0x1c/0x30 [ 1284.001426] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1284.020322] RSP: 0018:ffff888087affe28 EFLAGS: 00050297 [ 1284.025674] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1284.032930] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1284.040189] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1284.047445] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1284.054701] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1284.061984] ? __sys_socketpair+0xfb/0x570 [ 1284.066229] __sys_socketpair+0x107/0x570 [ 1284.070372] ? __ia32_sys_socket+0xb0/0xb0 [ 1284.074596] ? ksys_write+0x1c8/0x2a0 [ 1284.078389] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1284.083744] __x64_sys_socketpair+0x93/0xf0 [ 1284.088056] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1284.092625] do_syscall_64+0xf9/0x620 [ 1284.096423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1284.101599] RIP: 0033:0x7efd48e3a409 [ 1284.105298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1284.124186] RSP: 002b:00007efd477af168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1284.131887] RAX: ffffffffffffffda RBX: 00007efd48f4cf80 RCX: 00007efd48e3a409 05:56:53 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 7) 05:56:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffe, 0xbf7f, 0x5}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1284.139494] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 1284.146940] RBP: 00007efd477af1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.154194] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1284.161536] R13: 00007ffe4ad0591f R14: 00007efd477af300 R15: 0000000000022000 [ 1284.168817] CPU: 1 PID: 18931 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1284.176706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1284.186067] Call Trace: [ 1284.188667] dump_stack+0x1fc/0x2ef [ 1284.192312] should_fail.cold+0xa/0xf [ 1284.196123] ? setup_fault_attr+0x200/0x200 [ 1284.200453] ? lock_acquire+0x170/0x3c0 [ 1284.204440] __should_failslab+0x115/0x180 [ 1284.208689] should_failslab+0x5/0x10 [ 1284.212499] kmem_cache_alloc+0x277/0x370 [ 1284.216661] ptlock_alloc+0x1d/0x70 [ 1284.220294] pte_alloc_one+0x68/0x190 [ 1284.224103] do_huge_pmd_anonymous_page+0xb76/0x1e60 [ 1284.229213] ? lock_downgrade+0x720/0x720 [ 1284.233370] ? lock_acquire+0x170/0x3c0 [ 1284.237355] ? __pmd_alloc+0x147/0x440 [ 1284.241286] ? prep_transhuge_page+0xa0/0xa0 [ 1284.245701] ? do_raw_spin_unlock+0x171/0x230 [ 1284.250209] ? _raw_spin_unlock+0x29/0x40 [ 1284.254366] __handle_mm_fault+0x289c/0x41c0 [ 1284.258820] ? vm_insert_page+0x9c0/0x9c0 [ 1284.262974] ? __lock_acquire+0x6de/0x3ff0 [ 1284.267227] ? check_preemption_disabled+0x41/0x280 [ 1284.272260] handle_mm_fault+0x436/0xb10 [ 1284.276339] __do_page_fault+0x68e/0xd60 [ 1284.280415] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1284.285442] ? spurious_fault+0x840/0x840 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe5000000, &(0x7f0000000000)) 05:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2, 0x6, 0x10001, 0x5, 0x15, "0d4c91141b7b00002bd305c21878bce8ef17e6"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x208303, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0xe35}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) [ 1284.289599] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1284.294453] page_fault+0x1e/0x30 [ 1284.297941] RIP: 0010:__put_user_4+0x1c/0x30 [ 1284.302351] Code: 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 c0 df 01 00 48 8b 9b 98 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 01 cb <89> 01 31 c0 0f 01 ca c3 66 66 2e 0f 1f 84 00 00 00 00 00 90 65 48 [ 1284.321257] RSP: 0018:ffff88807c50fe28 EFLAGS: 00050297 [ 1284.326626] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 1284.333904] RDX: 0000000000000058 RSI: ffffffff866de86b RDI: 0000000000000286 [ 1284.341175] RBP: 0000000000000005 R08: ffffffff8cd38068 R09: 0000000000000000 [ 1284.348442] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000004 [ 1284.355714] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 1284.363008] ? __sys_socketpair+0xfb/0x570 [ 1284.367369] __sys_socketpair+0x107/0x570 [ 1284.371528] ? __ia32_sys_socket+0xb0/0xb0 [ 1284.375771] ? ksys_write+0x1c8/0x2a0 [ 1284.379581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1284.384959] __x64_sys_socketpair+0x93/0xf0 05:56:54 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) [ 1284.389289] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1284.393887] do_syscall_64+0xf9/0x620 [ 1284.397705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1284.402897] RIP: 0033:0x7fbf5b897409 [ 1284.406611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1284.425540] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1284.433257] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 05:56:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffe, 0xbf7f, 0x5}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0x20, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffe, 0xbf7f, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) (async) [ 1284.440532] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1284.447947] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.455221] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1284.462503] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:54 executing program 0: socketpair(0x2, 0x5, 0x0, &(0x7f00000003c0)) 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe5010000, &(0x7f0000000000)) 05:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xffffff9e, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2, 0x6, 0x10001, 0x5, 0x15, "0d4c91141b7b00002bd305c21878bce8ef17e6"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x208303, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0xe35}) (async, rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffe, 0xbf7f, 0x5}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:54 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 8) 05:56:54 executing program 0: socketpair(0xa, 0x5, 0x0, &(0x7f00000003c0)) 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe6000000, &(0x7f0000000000)) 05:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xfffffff0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2, 0x6, 0x10001, 0x5, 0x15, "0d4c91141b7b00002bd305c21878bce8ef17e6"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x208303, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0xe35}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x2, 0x6, 0x10001, 0x5, 0x15, "0d4c91141b7b00002bd305c21878bce8ef17e6"}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x208303, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={0x0, 0xe35}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:56:54 executing program 0: socketpair(0x2c, 0x5, 0x0, &(0x7f00000003c0)) [ 1284.702927] FAULT_INJECTION: forcing a failure. [ 1284.702927] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.753229] CPU: 0 PID: 18985 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1284.761141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1284.770498] Call Trace: [ 1284.773097] dump_stack+0x1fc/0x2ef [ 1284.776741] should_fail.cold+0xa/0xf [ 1284.780553] ? setup_fault_attr+0x200/0x200 [ 1284.784889] ? lock_acquire+0x170/0x3c0 [ 1284.788873] __should_failslab+0x115/0x180 [ 1284.793115] should_failslab+0x5/0x10 [ 1284.796918] kmem_cache_alloc+0x277/0x370 [ 1284.801075] ? sock_destroy_inode+0x60/0x60 [ 1284.805407] sock_alloc_inode+0x19/0x250 [ 1284.809475] ? sock_destroy_inode+0x60/0x60 [ 1284.813806] alloc_inode+0x5d/0x180 [ 1284.817437] new_inode_pseudo+0x14/0xe0 [ 1284.821421] sock_alloc+0x3c/0x260 [ 1284.824982] __sock_create+0xba/0x740 [ 1284.828835] __sys_socketpair+0x1be/0x570 [ 1284.833002] ? __ia32_sys_socket+0xb0/0xb0 [ 1284.837242] ? ksys_write+0x1c8/0x2a0 [ 1284.841058] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1284.846430] __x64_sys_socketpair+0x93/0xf0 [ 1284.850759] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1284.855345] do_syscall_64+0xf9/0x620 [ 1284.859170] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1284.864360] RIP: 0033:0x7fbf5b897409 [ 1284.868082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1284.886982] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1284.894700] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe6010000, &(0x7f0000000000)) 05:56:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4fd, 0x0, 0x401, 0x8000, 0x81000, 0xffffff5c, 0x4, 0x6], 0x8, 0xf70315fccd3df7b2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x20, 0x8, 0x80, 0x3], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4fd, 0x0, 0x401, 0x8000, 0x81000, 0xffffff5c, 0x4, 0x6], 0x8, 0xf70315fccd3df7b2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x20, 0x8, 0x80, 0x3], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe7000000, &(0x7f0000000000)) 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe7010000, &(0x7f0000000000)) 05:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xfffffffc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1284.901979] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1284.909257] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.916534] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1284.923811] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:54 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 9) 05:56:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0x4fd, 0x0, 0x401, 0x8000, 0x81000, 0xffffff5c, 0x4, 0x6], 0x8, 0xf70315fccd3df7b2, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r2}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x20, 0x8, 0x80, 0x3], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000180)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:54 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) read$midi(r0, 0x0, 0x7ffffffffffff) 05:56:54 executing program 0: socketpair(0x26, 0x2, 0x0, &(0x7f00000003c0)) 05:56:54 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe8000000, &(0x7f0000000000)) [ 1284.997268] socket: no more sockets 05:56:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0xffffffff, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x1ff, 0x8, 0x0, 0xfffffffb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:55 executing program 0: socketpair(0x26, 0x3, 0x0, &(0x7f00000003c0)) 05:56:55 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) (async) read$midi(r0, 0x0, 0x7ffffffffffff) [ 1285.088863] FAULT_INJECTION: forcing a failure. [ 1285.088863] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.146195] CPU: 1 PID: 19026 Comm: syz-executor.1 Not tainted 4.19.211-syzkaller #0 [ 1285.154108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1285.163463] Call Trace: [ 1285.166059] dump_stack+0x1fc/0x2ef [ 1285.169693] should_fail.cold+0xa/0xf [ 1285.173506] ? setup_fault_attr+0x200/0x200 [ 1285.177850] ? lock_acquire+0x170/0x3c0 [ 1285.181842] __should_failslab+0x115/0x180 [ 1285.186088] should_failslab+0x5/0x10 [ 1285.189893] kmem_cache_alloc_trace+0x284/0x380 05:56:55 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) read$midi(r0, 0x0, 0x7ffffffffffff) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$dmmidi(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) (async) read$midi(r0, 0x0, 0x7ffffffffffff) (async) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0xf, r1, 0x1}, 0x14}}, 0x0) [ 1285.194601] ? kmem_cache_alloc+0x315/0x370 [ 1285.198935] sock_alloc_inode+0x5f/0x250 [ 1285.203015] ? sock_destroy_inode+0x60/0x60 [ 1285.207343] alloc_inode+0x5d/0x180 [ 1285.210974] new_inode_pseudo+0x14/0xe0 [ 1285.214956] sock_alloc+0x3c/0x260 [ 1285.218503] __sock_create+0xba/0x740 [ 1285.222318] __sys_socketpair+0x1be/0x570 [ 1285.226472] ? __ia32_sys_socket+0xb0/0xb0 [ 1285.230715] ? ksys_write+0x1c8/0x2a0 [ 1285.234523] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1285.239894] __x64_sys_socketpair+0x93/0xf0 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0xc0, r1, 0x1}, 0x14}}, 0x0) [ 1285.244221] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1285.248807] do_syscall_64+0xf9/0x620 [ 1285.252619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1285.257829] RIP: 0033:0x7fbf5b897409 [ 1285.261646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1285.280633] RSP: 002b:00007fbf5a20c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1285.288348] RAX: ffffffffffffffda RBX: 00007fbf5b9a9f80 RCX: 00007fbf5b897409 [ 1285.295622] RDX: 000000000000003f RSI: 0000000000000005 RDI: 0000000000000026 [ 1285.302928] RBP: 00007fbf5a20c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1285.310209] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 1285.317479] R13: 00007fff5f5e8eef R14: 00007fbf5a20c300 R15: 0000000000022000 05:56:55 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (fail_nth: 10) 05:56:55 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe8010000, &(0x7f0000000000)) 05:56:55 executing program 0: socketpair(0x26, 0x4, 0x0, &(0x7f00000003c0)) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x1ff, 0x8, 0x0, 0xfffffffb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0xec0, r1, 0x1}, 0x14}}, 0x0) [ 1285.363626] socket: no more sockets 05:56:55 executing program 0: socketpair(0x26, 0xa, 0x0, &(0x7f00000003c0)) 05:56:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000451}, 0x4000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x2000c040) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x1ff, 0x8, 0x0, 0xfffffffb}) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:55 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x33fe0, r1, 0x1}, 0x14}}, 0x0) 05:56:55 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe9000000, &(0x7f0000000000)) 05:56:55 executing program 0: socketpair(0x26, 0xf, 0x0, &(0x7f00000003c0)) 05:56:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000451}, 0x4000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x2000c040) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000451}, 0x4000000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x2000c040) (async) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x8000000000000000, 0xa080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000380)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7ffd, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x400, 0x430402) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000280)={r8, 0x80000}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f00000002c0)={0x1}) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20000314, r1, 0x1}, 0x14}}, 0x0) 05:56:55 executing program 1: socketpair(0x2, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:55 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xe9010000, &(0x7f0000000000)) 05:56:55 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f00000003c0)) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x7ffff000, r1, 0x1}, 0x14}}, 0x0) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x8000000000000000, 0xa080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000380)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7ffd, 0x6, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x400, 0x430402) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000280)={r8, 0x80000}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f00000002c0)={0x1}) syz_open_dev$dri(&(0x7f0000000340), 0x8000000000000000, 0xa080) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000380)) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7ffd, 0x6, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r5}) (async) syz_open_dev$dri(&(0x7f0000000140), 0x400, 0x430402) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000280)={r8, 0x80000}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f00000002c0)={0x1}) (async) 05:56:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000451}, 0x4000000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x2000c040) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) (async) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000451}, 0x4000000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x80000001}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000081}, 0x2000c040) (async) 05:56:55 executing program 0: socketpair(0x26, 0x5, 0x2, &(0x7f00000003c0)) 05:56:55 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xea000000, &(0x7f0000000000)) 05:56:55 executing program 1: socketpair(0x2c, 0x5, 0x3f, &(0x7f00000003c0)) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0xfffffdef, r1, 0x1}, 0x14}}, 0x0) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x8000000000000000, 0xa080) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000380)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x7ffd, 0x6, 0x1, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000200)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x400, 0x430402) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000180)={0x7, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={r5, 0x80000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000280)={r8, 0x80000}) (async, rerun: 64) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f00000002c0)={0x1}) (rerun: 64) 05:56:55 executing program 0: socketpair(0x26, 0x5, 0x3, &(0x7f00000003c0)) 05:56:55 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xea010000, &(0x7f0000000000)) 05:56:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x4480d) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:55 executing program 1: socketpair(0x26, 0x4, 0x3f, &(0x7f00000003c0)) 05:56:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2}, 0x14}}, 0x0) 05:56:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x0, 0x3f, 0xfffffc01, 0x40, 0x2], 0x6, 0x26b7969b, 0x101, 0x3, 0x20, 0x95b, 0x4, {0x5, 0xc000, 0x2, 0x5, 0x8001, 0x89, 0x200, 0x99b, 0xfffc, 0x5, 0x7, 0x6, 0x7ffc, 0x401, "de76532f9fa9e0057be67f794d1c9fed5dbca99efc4268d995b22ba117e2137c"}}) syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x8020) 05:56:55 executing program 0: socketpair(0x26, 0x5, 0x4, &(0x7f00000003c0)) 05:56:55 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x4480d) (async, rerun: 32) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xeb000000, &(0x7f0000000000)) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x8}, 0x14}}, 0x0) 05:56:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x0, 0x3f, 0xfffffc01, 0x40, 0x2], 0x6, 0x26b7969b, 0x101, 0x3, 0x20, 0x95b, 0x4, {0x5, 0xc000, 0x2, 0x5, 0x8001, 0x89, 0x200, 0x99b, 0xfffc, 0x5, 0x7, 0x6, 0x7ffc, 0x401, "de76532f9fa9e0057be67f794d1c9fed5dbca99efc4268d995b22ba117e2137c"}}) syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x8020) 05:56:56 executing program 1: socketpair(0x26, 0xa, 0x3f, &(0x7f00000003c0)) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x10}, 0x14}}, 0x0) 05:56:56 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x4480d) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0x5, &(0x7f00000003c0)) 05:56:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) eventfd2(0x8, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpuacct'}]}, 0x9) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x48) socketpair(0x21, 0x3, 0x8000, &(0x7f0000000040)) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xeb010000, &(0x7f0000000000)) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x300}, 0x14}}, 0x0) 05:56:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000140)={&(0x7f00000000c0)=[0x5, 0x0, 0x3f, 0xfffffc01, 0x40, 0x2], 0x6, 0x26b7969b, 0x101, 0x3, 0x20, 0x95b, 0x4, {0x5, 0xc000, 0x2, 0x5, 0x8001, 0x89, 0x200, 0x99b, 0xfffc, 0x5, 0x7, 0x6, 0x7ffc, 0x401, "de76532f9fa9e0057be67f794d1c9fed5dbca99efc4268d995b22ba117e2137c"}}) syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x8020) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xec000000, &(0x7f0000000000)) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffffffb], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) read$midi(r2, &(0x7f0000000140)=""/172, 0xac) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0x6, &(0x7f00000003c0)) 05:56:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) eventfd2(0x8, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpuacct'}]}, 0x9) (async) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x48) socketpair(0x21, 0x3, 0x8000, &(0x7f0000000040)) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0x7, &(0x7f00000003c0)) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xec010000, &(0x7f0000000000)) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffffffb], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) read$midi(r2, &(0x7f0000000140)=""/172, 0xac) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x80000000, 0x7f, 0x9, 0x0, 0x3, 0x6], 0x6, 0x80000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0x8, &(0x7f00000003c0)) 05:56:56 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) eventfd2(0x8, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpuacct'}]}, 0x9) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x48) socketpair(0x21, 0x3, 0x8000, &(0x7f0000000040)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) eventfd2(0x8, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x2d, 'cpuacct'}]}, 0x9) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'devices'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x48) (async) socketpair(0x21, 0x3, 0x8000, &(0x7f0000000040)) (async) 05:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x80000000, 0x7f, 0x9, 0x0, 0x3, 0x6], 0x6, 0x80000}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (rerun: 64) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xed000000, &(0x7f0000000000)) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffffffb], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) read$midi(r2, &(0x7f0000000140)=""/172, 0xac) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xfffffffb], 0x1, 0x80800}) (async) read$midi(r2, &(0x7f0000000140)=""/172, 0xac) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x2}, 0x14}}, 0x0) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0x9, &(0x7f00000003c0)) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xed010000, &(0x7f0000000000)) 05:56:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x80000000, 0x7f, 0x9, 0x0, 0x3, 0x6], 0x6, 0x80000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000140)=[0x80000000, 0x7f, 0x9, 0x0, 0x3, 0x6], 0x6, 0x80000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:56:56 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="3daec38e0c3ab0c0d2170811fa0d8b3b360fad7913d2ea523e1f821801f2bebb34f9e99c55d3fb34df0c3792c3c4e2a3271f21688bae", 0x36, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r1, 0x3b, &(0x7f00000000c0)=""/59}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x3}, 0x14}}, 0x0) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0xa, &(0x7f00000003c0)) 05:56:56 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) 05:56:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x183800) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x40, 0x3], 0x2, 0x6, 0x1, 0x0, 0x6, 0x7fffffff, 0x7fff, {0xea, 0x8001, 0x9, 0x6, 0x8000, 0x0, 0x800, 0x800, 0x4682, 0x800, 0x4, 0x8, 0x2, 0x0, "d0d8c81038d1193b2c03a4142de230eb7e473c6bc8a74e1293b76db6a3c5b8bb"}}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x4, 0x0, 0xffffff41, 0xea9a, 0x95, 0x10001, 0x400], 0x7, 0x8, 0x3, 0x1f, 0xe8, 0x7ff, 0x1, {0x7, 0x2, 0x0, 0x3a, 0x800, 0x3, 0x4, 0x0, 0x7, 0x8001, 0x904, 0x7, 0x8, 0x7f, "cf5045725167bf757f8c45f9dd844726672768345fda3299302722924301086b"}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="65727370616e30000000000001000000abd1df809d94939964fa4009634a1f52c428d6333fe4983c1dfd7168c3f3694863d87676d2f2f7079c1cf3ed9964007a22cded44c538607f29c3048d5dd841001f89ee05190b5cd067b9c7da8159bf994668566531623f59525f423390ebb2cc2fb22c5eaaac597442c8acb8de1fdd89344bebbb5ca232b7cd006e71a7bb96257ee3f4896b5f73ac34ac2b284af562ff7dfe0d0c1955d5ed73d5a6cea1d3d7d5d6e6e9d75fa2d2aa04e117fc947623f3d3c19f5be354c318d556aeaf5524fb0c9f822cc4bd21389d605ef99b9eac1a87b251c2ef8cfd0da7ce996e97c4252ff26faa73d10f2554b3779f580509d57618454501146b53eff39a1f222f8163d6b1f9a2cd632281a600d1d6bd10467e2737e71c48d439e1dd985e45aebae676033ba261fdca3d66f6686bf2321ffb6b7a32a7389181ee3d1d2e726eb8b943831b36b2ea8f671d211c91462cc641c6410e950feddc43bcab7f65a83ed81c02fd94d08874fdac3749c7ef487e76e6c7445bc387a92a18b8bfe069", @ANYRES32=0x0, @ANYBLOB="0700008000000215000000044a15002800680000f82f9078ac1e00017f00000144144be3ac1414320000008e7f00000100000005"]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffd, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xee000000, &(0x7f0000000000)) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="3daec38e0c3ab0c0d2170811fa0d8b3b360fad7913d2ea523e1f821801f2bebb34f9e99c55d3fb34df0c3792c3c4e2a3271f21688bae", 0x36, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r1, 0x3b, &(0x7f00000000c0)=""/59}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x4}, 0x14}}, 0x0) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0xb, &(0x7f00000003c0)) 05:56:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x183800) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x40, 0x3], 0x2, 0x6, 0x1, 0x0, 0x6, 0x7fffffff, 0x7fff, {0xea, 0x8001, 0x9, 0x6, 0x8000, 0x0, 0x800, 0x800, 0x4682, 0x800, 0x4, 0x8, 0x2, 0x0, "d0d8c81038d1193b2c03a4142de230eb7e473c6bc8a74e1293b76db6a3c5b8bb"}}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x4, 0x0, 0xffffff41, 0xea9a, 0x95, 0x10001, 0x400], 0x7, 0x8, 0x3, 0x1f, 0xe8, 0x7ff, 0x1, {0x7, 0x2, 0x0, 0x3a, 0x800, 0x3, 0x4, 0x0, 0x7, 0x8001, 0x904, 0x7, 0x8, 0x7f, "cf5045725167bf757f8c45f9dd844726672768345fda3299302722924301086b"}}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0700008000000215000000044a15002800680000f82f9078ac1e00017f00000144144be3ac1414320000008e7f00000100000005"]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffd, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:56 executing program 1: socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) socketpair(0x26, 0x0, 0x3f, &(0x7f00000003c0)) (async) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xee010000, &(0x7f0000000000)) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="3daec38e0c3ab0c0d2170811fa0d8b3b360fad7913d2ea523e1f821801f2bebb34f9e99c55d3fb34df0c3792c3c4e2a3271f21688bae", 0x36, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r1, 0x3b, &(0x7f00000000c0)=""/59}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="3daec38e0c3ab0c0d2170811fa0d8b3b360fad7913d2ea523e1f821801f2bebb34f9e99c55d3fb34df0c3792c3c4e2a3271f21688bae", 0x36}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r1, 0x3b, &(0x7f00000000c0)=""/59}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x7}, 0x14}}, 0x0) 05:56:56 executing program 0: socketpair(0x26, 0x5, 0xc, &(0x7f00000003c0)) 05:56:56 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:56:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x8}, 0x14}}, 0x0) 05:56:56 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xef000000, &(0x7f0000000000)) 05:56:56 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x183800) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000280)=[0x40, 0x3], 0x2, 0x6, 0x1, 0x0, 0x6, 0x7fffffff, 0x7fff, {0xea, 0x8001, 0x9, 0x6, 0x8000, 0x0, 0x800, 0x800, 0x4682, 0x800, 0x4, 0x8, 0x2, 0x0, "d0d8c81038d1193b2c03a4142de230eb7e473c6bc8a74e1293b76db6a3c5b8bb"}}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x4, 0x0, 0xffffff41, 0xea9a, 0x95, 0x10001, 0x400], 0x7, 0x8, 0x3, 0x1f, 0xe8, 0x7ff, 0x1, {0x7, 0x2, 0x0, 0x3a, 0x800, 0x3, 0x4, 0x0, 0x7, 0x8001, 0x904, 0x7, 0x8, 0x7f, "cf5045725167bf757f8c45f9dd844726672768345fda3299302722924301086b"}}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="65727370616e30000000000001000000abd1df809d94939964fa4009634a1f52c428d6333fe4983c1dfd7168c3f3694863d87676d2f2f7079c1cf3ed9964007a22cded44c538607f29c3048d5dd841001f89ee05190b5cd067b9c7da8159bf994668566531623f59525f423390ebb2cc2fb22c5eaaac597442c8acb8de1fdd89344bebbb5ca232b7cd006e71a7bb96257ee3f4896b5f73ac34ac2b284af562ff7dfe0d0c1955d5ed73d5a6cea1d3d7d5d6e6e9d75fa2d2aa04e117fc947623f3d3c19f5be354c318d556aeaf5524fb0c9f822cc4bd21389d605ef99b9eac1a87b251c2ef8cfd0da7ce996e97c4252ff26faa73d10f2554b3779f580509d57618454501146b53eff39a1f222f8163d6b1f9a2cd632281a600d1d6bd10467e2737e71c48d439e1dd985e45aebae676033ba261fdca3d66f6686bf2321ffb6b7a32a7389181ee3d1d2e726eb8b943831b36b2ea8f671d211c91462cc641c6410e950feddc43bcab7f65a83ed81c02fd94d08874fdac3749c7ef487e76e6c7445bc387a92a18b8bfe069", @ANYRES32=0x0, @ANYBLOB="0700008000000215000000044a15002800680000f82f9078ac1e00017f00000144144be3ac1414320000008e7f00000100000005"]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffd, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdddf250400000006001a004e20000006001c000200000005000d000100000006001b004e210000050006007f000000", @ANYRES8=r1, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x6008951}, 0x800) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x6, 0x10000}) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0xd, &(0x7f00000003c0)) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xe}, 0x14}}, 0x0) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xef010000, &(0x7f0000000000)) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdddf250400000006001a004e20000006001c000200000005000d000100000006001b004e210000050006007f000000", @ANYRES8=r1, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x6008951}, 0x800) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x6, 0x10000}) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0xe, &(0x7f00000003c0)) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf}, 0x14}}, 0x0) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf0000000, &(0x7f0000000000)) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x60}, 0x14}}, 0x0) 05:56:57 executing program 1: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200027bd7000fbdddf250400000006001a004e20000006001c000200000005000d000100000006001b004e210000050006007f000000", @ANYRES8=r1, @ANYRESHEX=r2], 0x3c}, 0x1, 0x0, 0x0, 0x6008951}, 0x800) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x6, 0x10000}) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0xf, &(0x7f00000003c0)) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf0010000, &(0x7f0000000000)) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:56:57 executing program 1: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000340)=[0x4, 0xfff, 0x2, 0x80000000, 0x989c, 0x6, 0x0, 0x800, 0x8656, 0x8000, 0xe4, 0x200], 0xc, 0x800, 0x0, 0x7dd57120, 0x9, 0xbcd, 0x0, {0x9, 0x56, 0xfff, 0x3, 0x5, 0x20, 0x5, 0x401, 0x7, 0x9, 0x5, 0x8, 0x6, 0x8001, "521153739f6976ed8962d1d066db32e96228d9e51d34c6a1638c807640f9df30"}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x200000000000018f, &(0x7f0000000380)}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000400)={0x0, 0x3}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={0x0, 0x80}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0x3) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000240)=[0x6, 0x7836]}) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf0}, 0x14}}, 0x0) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000340)=[0x4, 0xfff, 0x2, 0x80000000, 0x989c, 0x6, 0x0, 0x800, 0x8656, 0x8000, 0xe4, 0x200], 0xc, 0x800, 0x0, 0x7dd57120, 0x9, 0xbcd, 0x0, {0x9, 0x56, 0xfff, 0x3, 0x5, 0x20, 0x5, 0x401, 0x7, 0x9, 0x5, 0x8, 0x6, 0x8001, "521153739f6976ed8962d1d066db32e96228d9e51d34c6a1638c807640f9df30"}}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x200000000000018f, &(0x7f0000000380)}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000400)={0x0, 0x3}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={0x0, 0x80}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0x3) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000240)=[0x6, 0x7836]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000340)=[0x4, 0xfff, 0x2, 0x80000000, 0x989c, 0x6, 0x0, 0x800, 0x8656, 0x8000, 0xe4, 0x200], 0xc, 0x800, 0x0, 0x7dd57120, 0x9, 0xbcd, 0x0, {0x9, 0x56, 0xfff, 0x3, 0x5, 0x20, 0x5, 0x401, 0x7, 0x9, 0x5, 0x8, 0x6, 0x8001, "521153739f6976ed8962d1d066db32e96228d9e51d34c6a1638c807640f9df30"}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x200000000000018f, &(0x7f0000000380)}) (async) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000400)={0x0, 0x3}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={0x0, 0x80}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) (async) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0x3) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000240)=[0x6, 0x7836]}) (async) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0x10, &(0x7f00000003c0)) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf1000000, &(0x7f0000000000)) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x200, 0xffffffff, 0x0, 0x0}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x7, "9fb0a3436614eb408e784b2678a2841ec79aaa892f4519c997fcd2e60accdd0f"}) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x8, 0xf0, 0x7}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r5}) 05:56:57 executing program 1: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x300}, 0x14}}, 0x0) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x200, 0xffffffff, 0x0, 0x0}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x7, "9fb0a3436614eb408e784b2678a2841ec79aaa892f4519c997fcd2e60accdd0f"}) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x8, 0xf0, 0x7}) (async, rerun: 64) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) (async, rerun: 32) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, &(0x7f0000000200)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r5}) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000340)=[0x4, 0xfff, 0x2, 0x80000000, 0x989c, 0x6, 0x0, 0x800, 0x8656, 0x8000, 0xe4, 0x200], 0xc, 0x800, 0x0, 0x7dd57120, 0x9, 0xbcd, 0x0, {0x9, 0x56, 0xfff, 0x3, 0x5, 0x20, 0x5, 0x401, 0x7, 0x9, 0x5, 0x8, 0x6, 0x8001, "521153739f6976ed8962d1d066db32e96228d9e51d34c6a1638c807640f9df30"}}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000003c0)={0x200000000000018f, &(0x7f0000000380)}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000400)={0x0, 0x3}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={0x0, 0x80}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000300)=0x3) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000240)=[0x6, 0x7836]}) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf1010000, &(0x7f0000000000)) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0x11, &(0x7f00000003c0)) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) write$midi(0xffffffffffffffff, &(0x7f0000000000)="d3aa3ccf6fb2c7b72a204ad7e94d2415bc5a93215b5a8a441f72756c4ba2df3ba22c65b95e0e6d03600e23aa97ce6b064bffabad1c39f9671bda2cba3aa456af8d2f059d60cbc299341fad0cab7043268e5847e9a591ea7b018415e928be217a2d4b251ca447cb60dc5c0518926f2ac097a69b8659474a0e65ec32cf7ab956eee1a5eb71fa92913482b8a2ced965259bc307b27a0eb48bc01e6b96965723f09dc2eba577beb79905dc32f71cdd63c8c8b7239417bae1b20e3bde3db47bc377b78a410f", 0xc3) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x700}, 0x14}}, 0x0) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf2000000, &(0x7f0000000000)) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) (async) write$midi(0xffffffffffffffff, &(0x7f0000000000)="d3aa3ccf6fb2c7b72a204ad7e94d2415bc5a93215b5a8a441f72756c4ba2df3ba22c65b95e0e6d03600e23aa97ce6b064bffabad1c39f9671bda2cba3aa456af8d2f059d60cbc299341fad0cab7043268e5847e9a591ea7b018415e928be217a2d4b251ca447cb60dc5c0518926f2ac097a69b8659474a0e65ec32cf7ab956eee1a5eb71fa92913482b8a2ced965259bc307b27a0eb48bc01e6b96965723f09dc2eba577beb79905dc32f71cdd63c8c8b7239417bae1b20e3bde3db47bc377b78a410f", 0xc3) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000000280)={0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x200, 0xffffffff, 0x0, 0x0}) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x7, "9fb0a3436614eb408e784b2678a2841ec79aaa892f4519c997fcd2e60accdd0f"}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000180)={0x8, 0xf0, 0x7}) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r8, 0x80605414, &(0x7f0000000200)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r5}) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0x12, &(0x7f00000003c0)) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xe00}, 0x14}}, 0x0) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf2010000, &(0x7f0000000000)) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) write$midi(0xffffffffffffffff, &(0x7f0000000000)="d3aa3ccf6fb2c7b72a204ad7e94d2415bc5a93215b5a8a441f72756c4ba2df3ba22c65b95e0e6d03600e23aa97ce6b064bffabad1c39f9671bda2cba3aa456af8d2f059d60cbc299341fad0cab7043268e5847e9a591ea7b018415e928be217a2d4b251ca447cb60dc5c0518926f2ac097a69b8659474a0e65ec32cf7ab956eee1a5eb71fa92913482b8a2ced965259bc307b27a0eb48bc01e6b96965723f09dc2eba577beb79905dc32f71cdd63c8c8b7239417bae1b20e3bde3db47bc377b78a410f", 0xc3) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f0000000100)) (async) write$midi(0xffffffffffffffff, &(0x7f0000000000)="d3aa3ccf6fb2c7b72a204ad7e94d2415bc5a93215b5a8a441f72756c4ba2df3ba22c65b95e0e6d03600e23aa97ce6b064bffabad1c39f9671bda2cba3aa456af8d2f059d60cbc299341fad0cab7043268e5847e9a591ea7b018415e928be217a2d4b251ca447cb60dc5c0518926f2ac097a69b8659474a0e65ec32cf7ab956eee1a5eb71fa92913482b8a2ced965259bc307b27a0eb48bc01e6b96965723f09dc2eba577beb79905dc32f71cdd63c8c8b7239417bae1b20e3bde3db47bc377b78a410f", 0xc3) (async) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf3000000, &(0x7f0000000000)) 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x16, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x7c9, &(0x7f0000000040)=0x2) sendto$isdn(r0, &(0x7f0000000300)={0x3ff, 0x0, "7a1abfa9e7f21a9b1c03d03693be5095c43899367fe8ab2466c2f81ba0aca56617ee54b3dcd23d6254e7dfba1f2fc5cc584bb921a1cf3b6a32c00289dec4bd40743af7157af46c"}, 0x4f, 0x5000, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$proc_mixer(r7, &(0x7f0000000400)=[{'LINE3', @val={' \'', 'Synth'}}], 0x23) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf00}, 0x14}}, 0x0) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0x13, &(0x7f00000003c0)) 05:56:57 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf3010000, &(0x7f0000000000)) 05:56:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x20000000000001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x4b72}, 0x14}}, 0x0) 05:56:57 executing program 0: socketpair(0x26, 0x5, 0x14, &(0x7f00000003c0)) 05:56:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) (rerun: 32) [ 1288.000998] Enabling of bearer rejected, failed to enable media 05:56:57 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 64) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) (rerun: 64) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x16, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x7c9, &(0x7f0000000040)=0x2) (async) sendto$isdn(r0, &(0x7f0000000300)={0x3ff, 0x0, "7a1abfa9e7f21a9b1c03d03693be5095c43899367fe8ab2466c2f81ba0aca56617ee54b3dcd23d6254e7dfba1f2fc5cc584bb921a1cf3b6a32c00289dec4bd40743af7157af46c"}, 0x4f, 0x5000, 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$proc_mixer(r7, &(0x7f0000000400)=[{'LINE3', @val={' \'', 'Synth'}}], 0x23) 05:56:58 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf4000000, &(0x7f0000000000)) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x6000}, 0x14}}, 0x0) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf4010000, &(0x7f0000000000)) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x15, &(0x7f00000003c0)) 05:56:58 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) 05:56:58 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$vsock_dgram(r0, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r2 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x16, 0x8, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x7c9, &(0x7f0000000040)=0x2) (async) sendto$isdn(r0, &(0x7f0000000300)={0x3ff, 0x0, "7a1abfa9e7f21a9b1c03d03693be5095c43899367fe8ab2466c2f81ba0aca56617ee54b3dcd23d6254e7dfba1f2fc5cc584bb921a1cf3b6a32c00289dec4bd40743af7157af46c"}, 0x4f, 0x5000, 0x0, 0x0) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$proc_mixer(r7, &(0x7f0000000400)=[{'LINE3', @val={' \'', 'Synth'}}], 0x23) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x724b}, 0x14}}, 0x0) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf5000000, &(0x7f0000000000)) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x16, &(0x7f00000003c0)) 05:56:58 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x8001, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf5010000, &(0x7f0000000000)) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x17, &(0x7f00000003c0)) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf000}, 0x14}}, 0x0) 05:56:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100600002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x4040020) [ 1288.380413] Enabling of bearer rejected, failed to enable media 05:56:58 executing program 1: socketpair(0xb, 0x80c, 0x80, &(0x7f00000003c0)) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x8001, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf6000000, &(0x7f0000000000)) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x18, &(0x7f00000003c0)) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x30000}, 0x14}}, 0x0) 05:56:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020040) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100600002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x4040020) 05:56:58 executing program 1: socketpair(0xb, 0x80c, 0x80, &(0x7f00000003c0)) socketpair(0xb, 0x80c, 0x80, &(0x7f00000003c0)) (async) 05:56:58 executing program 1: socketpair(0xb, 0x80c, 0x80, &(0x7f00000003c0)) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf6010000, &(0x7f0000000000)) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x19, &(0x7f00000003c0)) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf0ffff}, 0x14}}, 0x0) 05:56:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_vlan\x00'}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4020040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100600002}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x4040020) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x8001, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x8001, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf7000000, &(0x7f0000000000)) 05:56:58 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd99}}, ["", "", ""]}, 0x24}}, 0x80) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x1000000}, 0x14}}, 0x0) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x20], 0x1, 0x7, 0x4e1, 0x6, 0x80000000, 0x0, 0x5, {0x400, 0x9, 0x8, 0x101, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x800, 0xbf2e, 0x8b, 0x1, 0x8, "44bd92fab8052387cbff9141640407433bc272d9860d5a04084ea94a72051a87"}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x1a, &(0x7f00000003c0)) 05:56:58 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0xbf, 0x800], 0x3, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffb, r3}) 05:56:58 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf7010000, &(0x7f0000000000)) 05:56:58 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd99}}, ["", "", ""]}, 0x24}}, 0x80) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd99}}, ["", "", ""]}, 0x24}}, 0x80) (async) 05:56:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x2000000}, 0x14}}, 0x0) 05:56:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x20], 0x1, 0x7, 0x4e1, 0x6, 0x80000000, 0x0, 0x5, {0x400, 0x9, 0x8, 0x101, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x800, 0xbf2e, 0x8b, 0x1, 0x8, "44bd92fab8052387cbff9141640407433bc272d9860d5a04084ea94a72051a87"}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x20], 0x1, 0x7, 0x4e1, 0x6, 0x80000000, 0x0, 0x5, {0x400, 0x9, 0x8, 0x101, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x800, 0xbf2e, 0x8b, 0x1, 0x8, "44bd92fab8052387cbff9141640407433bc272d9860d5a04084ea94a72051a87"}}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:56:58 executing program 0: socketpair(0x26, 0x5, 0x1b, &(0x7f00000003c0)) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0xbf, 0x800], 0x3, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffb, r3}) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf8000000, &(0x7f0000000000)) 05:56:59 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xd99}}, ["", "", ""]}, 0x24}}, 0x80) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x3000000}, 0x14}}, 0x0) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x20], 0x1, 0x7, 0x4e1, 0x6, 0x80000000, 0x0, 0x5, {0x400, 0x9, 0x8, 0x101, 0x3, 0x7, 0x8, 0x7ff, 0x2, 0x800, 0xbf2e, 0x8b, 0x1, 0x8, "44bd92fab8052387cbff9141640407433bc272d9860d5a04084ea94a72051a87"}}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x9, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000000)=0x3, 0x1) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x1c, &(0x7f00000003c0)) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0xbf, 0x800], 0x3, 0x1800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000180)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0xfffffffffffffffb, r3}) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf8010000, &(0x7f0000000000)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x4000000}, 0x14}}, 0x0) 05:56:59 executing program 1: socketpair(0x1, 0x3, 0x3c, &(0x7f00000003c0)) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc739, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf9000000, &(0x7f0000000000)) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x1d, &(0x7f00000003c0)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x7000000}, 0x14}}, 0x0) 05:56:59 executing program 1: socketpair(0x1, 0x3, 0x3c, &(0x7f00000003c0)) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x2, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc739, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x2}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc739, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xf9010000, &(0x7f0000000000)) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x1e, &(0x7f00000003c0)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x8000000}, 0x14}}, 0x0) 05:56:59 executing program 1: socketpair(0x1, 0x3, 0x3c, &(0x7f00000003c0)) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x2, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc739, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 32) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xe000000}, 0x14}}, 0x0) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x21, &(0x7f00000003c0)) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfa000000, &(0x7f0000000000)) 05:56:59 executing program 1: socketpair(0x2, 0x1, 0x35, &(0x7f0000000040)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf000000}, 0x14}}, 0x0) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x22, &(0x7f00000003c0)) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xae2c, 0xfffffffd, 0x9d90, 0x5, 0x1000, 0x8001], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x4, 0x3e, 0x0, 0x8001}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfa010000, &(0x7f0000000000)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x60000000}, 0x14}}, 0x0) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x100, 0x2, 0xd7ad}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xae2c, 0xfffffffd, 0x9d90, 0x5, 0x1000, 0x8001], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x4, 0x3e, 0x0, 0x8001}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x23, &(0x7f00000003c0)) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfb000000, &(0x7f0000000000)) 05:56:59 executing program 1: socketpair(0x2, 0x1, 0x35, &(0x7f0000000040)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x724b0000}, 0x14}}, 0x0) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x100, 0x2, 0xd7ad}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x9effffff}, 0x14}}, 0x0) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xae2c, 0xfffffffd, 0x9d90, 0x5, 0x1000, 0x8001], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000140)={0x1, 0x3, 0x3, 0x4, 0x3e, 0x0, 0x8001}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x24, &(0x7f00000003c0)) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfb010000, &(0x7f0000000000)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xf0ffffff}, 0x14}}, 0x0) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x25, &(0x7f00000003c0)) 05:56:59 executing program 1: socketpair(0x2, 0x1, 0x35, &(0x7f0000000040)) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x100, 0x2, 0xd7ad}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:56:59 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfc000000, &(0x7f0000000000)) 05:56:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:56:59 executing program 0: socketpair(0x26, 0x5, 0x26, &(0x7f00000003c0)) 05:56:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xfcffffff}, 0x14}}, 0x0) 05:56:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfc010000, &(0x7f0000000000)) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x27, &(0x7f00000003c0)) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfd000000, &(0x7f0000000000)) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:00 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xfffff000}, 0x14}}, 0x0) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x28, &(0x7f00000003c0)) 05:57:00 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff8, 0x0, 0x2}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfd010000, &(0x7f0000000000)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xffffff7f}, 0x14}}, 0x0) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x29, &(0x7f00000003c0)) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff8, 0x0, 0x2}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfe000000, &(0x7f0000000000)) 05:57:00 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async, rerun: 32) r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2a, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xffffff9e}, 0x14}}, 0x0) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfe010000, &(0x7f0000000000)) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100, 0x4002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8913, &(0x7f0000000200)={'wpan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff8, 0x0, 0x2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0xfffffffffffffff8, 0x0, 0x2}) (async) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2b, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xfffffff0}, 0x14}}, 0x0) 05:57:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socketpair(0x28, 0x1, 0x8, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfeffffff, &(0x7f0000000000)) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100, 0x4002) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8913, &(0x7f0000000200)={'wpan1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x100, 0x4002) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8913, &(0x7f0000000200)={'wpan1\x00'}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2c, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xfffffffc}, 0x14}}, 0x0) 05:57:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) socketpair(0x28, 0x1, 0x8, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000002, 0xc806) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x101, 0xfff, 0xfffffd99, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xffff, 0x7, 0x400, 0x1, 0x81], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1d, 0x2, 0xbb7a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xff000000, &(0x7f0000000000)) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2d, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0xffffffff}, 0x14}}, 0x0) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x100, 0x4002) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8913, &(0x7f0000000200)={'wpan1\x00'}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (rerun: 32) 05:57:00 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) socketpair(0x28, 0x1, 0x8, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000002, 0xc806) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x101, 0xfff, 0xfffffd99, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xffff, 0x7, 0x400, 0x1, 0x81], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1d, 0x2, 0xbb7a}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f00000000c0), 0x20000002, 0xc806) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x101, 0xfff, 0xfffffd99, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xffff, 0x7, 0x400, 0x1, 0x81], 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1d, 0x2, 0xbb7a}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xff010000, &(0x7f0000000000)) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2e, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x8000, 0x6, &(0x7f0000000040)=[0x6d8, 0x9, 0x77b1, 0x7, 0x9, 0xf77c], &(0x7f00000000c0)=[0x79c, 0x4, 0x7, 0x200], &(0x7f0000000100)}) 05:57:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10045000}, 0x24000014) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x1) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x20000002, 0xc806) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x101, 0xfff, 0xfffffd99, 0x6}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xffff, 0x7, 0x400, 0x1, 0x81], 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x1d, 0x2, 0xbb7a}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfffff000, &(0x7f0000000000)) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x2f, &(0x7f00000003c0)) 05:57:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x2}, 0x14}}, 0x0) 05:57:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x8000, 0x6, &(0x7f0000000040)=[0x6d8, 0x9, 0x77b1, 0x7, 0x9, 0xf77c], &(0x7f00000000c0)=[0x79c, 0x4, 0x7, 0x200], &(0x7f0000000100)}) 05:57:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10045000}, 0x24000014) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x1) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:00 executing program 0: socketpair(0x26, 0x5, 0x30, &(0x7f00000003c0)) 05:57:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0xffffffff, 0x5, 0x0, 0x0}) r5 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x44c0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f00000002c0)=0x5) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x80001) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2e2, 0x3, 0xeac, 0x2, 0x7, 0xfff, 0x6], 0x7, 0x5, 0x4, 0xfffffffc, 0x6, 0x1, 0xffffffff, {0x1ff, 0x0, 0x9137, 0xffff, 0x7f, 0x1ff, 0xff01, 0x51bb, 0x40, 0x3, 0x1, 0xff, 0x5, 0x20, "93c641bcb9815258171cc721bb94ab2b3ce3a771a34cd22db45eef04fe85d97a"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:00 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xfffffffe, &(0x7f0000000000)) 05:57:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10045000}, 0x24000014) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x1) (async, rerun: 32) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (rerun: 32) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x3}, 0x14}}, 0x0) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x31, &(0x7f00000003c0)) 05:57:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x40000) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000140)={0x8000, 0x6, &(0x7f0000000040)=[0x6d8, 0x9, 0x77b1, 0x7, 0x9, 0xf77c], &(0x7f00000000c0)=[0x79c, 0x4, 0x7, 0x200], &(0x7f0000000100)}) 05:57:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0xffffffff, 0x5, 0x0, 0x0}) r5 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x44c0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f00000002c0)=0x5) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) (async) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x80001) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2e2, 0x3, 0xeac, 0x2, 0x7, 0xfff, 0x6], 0x7, 0x5, 0x4, 0xfffffffc, 0x6, 0x1, 0xffffffff, {0x1ff, 0x0, 0x9137, 0xffff, 0x7f, 0x1ff, 0xff01, 0x51bb, 0x40, 0x3, 0x1, 0xff, 0x5, 0x20, "93c641bcb9815258171cc721bb94ab2b3ce3a771a34cd22db45eef04fe85d97a"}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:01 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0xffffffff, &(0x7f0000000000)) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x32, &(0x7f00000003c0)) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x4}, 0x14}}, 0x0) 05:57:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x9, 0x0, 0x564, 0x200, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) write$proc_mixer(r1, &(0x7f0000000180)=[{'TREBLE', @val={' \'', 'CD Capture Switch'}}, {'LINE2', @void}, {'MONITOR', @val={' \'', 'Synth Capture'}}, {'VIDEO', @void}, {'DIGITAL2', @void}, {'BASS', @void}, {'RADIO', @void}, {'RECLEV', @val={' \'', 'CD Capture'}}, {'LINE3', @val={' \'', 'Capture'}}], 0xcb) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x4000008) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4001, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x2, 0xffffffff, 0x5, 0x0, 0x0}) (async) r5 = syz_open_dev$dmmidi(&(0x7f0000000280), 0x2, 0x44c0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r5, 0x40045731, &(0x7f00000002c0)=0x5) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0xffffffffffffffff, 0x80001) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000200)={&(0x7f00000001c0)=[0x2e2, 0x3, 0xeac, 0x2, 0x7, 0xfff, 0x6], 0x7, 0x5, 0x4, 0xfffffffc, 0x6, 0x1, 0xffffffff, {0x1ff, 0x0, 0x9137, 0xffff, 0x7f, 0x1ff, 0xff01, 0x51bb, 0x40, 0x3, 0x1, 0xff, 0x5, 0x20, "93c641bcb9815258171cc721bb94ab2b3ce3a771a34cd22db45eef04fe85d97a"}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0x62) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) setreuid(r1, 0xffffffffffffffff) setuid(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6c, 0x80000000, 0x7fffffff], 0x3, 0x7, 0xffffff17, 0x1ff, 0x4, 0x1, 0x800, {0x1, 0x800, 0xfffb, 0x20, 0x8cf7, 0x5, 0xff, 0x101, 0x4, 0x0, 0x7, 0x1ff, 0x20, 0x5, "f77c22c316bb92f4635be0bb75e89380bb6e6edc069dd5e308f9731bf3b4e03e"}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) setuid(0xee01) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x33, &(0x7f00000003c0)) 05:57:01 executing program 3: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/98, 0x62, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x7}, 0x14}}, 0x0) 05:57:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x9, 0x0, 0x564, 0x200, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) write$proc_mixer(r1, &(0x7f0000000180)=[{'TREBLE', @val={' \'', 'CD Capture Switch'}}, {'LINE2', @void}, {'MONITOR', @val={' \'', 'Synth Capture'}}, {'VIDEO', @void}, {'DIGITAL2', @void}, {'BASS', @void}, {'RADIO', @void}, {'RECLEV', @val={' \'', 'CD Capture'}}, {'LINE3', @val={' \'', 'Capture'}}], 0xcb) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x4000008) (async, rerun: 64) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (rerun: 64) 05:57:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0x62) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) (async) setreuid(r1, 0xffffffffffffffff) (async) setuid(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6c, 0x80000000, 0x7fffffff], 0x3, 0x7, 0xffffff17, 0x1ff, 0x4, 0x1, 0x800, {0x1, 0x800, 0xfffb, 0x20, 0x8cf7, 0x5, 0xff, 0x101, 0x4, 0x0, 0x7, 0x1ff, 0x20, 0x5, "f77c22c316bb92f4635be0bb75e89380bb6e6edc069dd5e308f9731bf3b4e03e"}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) setuid(0xee01) 05:57:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r4, 0x8, 0x70bd26, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000044}, 0x90) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x34, &(0x7f00000003c0)) 05:57:01 executing program 3: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/98, 0x62, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/98, 0x62, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x8}, 0x14}}, 0x0) 05:57:01 executing program 5: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0x62) (async) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000040)=0x2, 0x4) setreuid(r1, 0xffffffffffffffff) (async) setuid(r1) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000000)=[0x6c, 0x80000000, 0x7fffffff], 0x3, 0x7, 0xffffff17, 0x1ff, 0x4, 0x1, 0x800, {0x1, 0x800, 0xfffb, 0x20, 0x8cf7, 0x5, 0xff, 0x101, 0x4, 0x0, 0x7, 0x1ff, 0x20, 0x5, "f77c22c316bb92f4635be0bb75e89380bb6e6edc069dd5e308f9731bf3b4e03e"}}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) setuid(0xee01) 05:57:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r4, 0x8, 0x70bd26, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000044}, 0x90) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x9, 0x0, 0x564, 0x200, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) write$proc_mixer(r1, &(0x7f0000000180)=[{'TREBLE', @val={' \'', 'CD Capture Switch'}}, {'LINE2', @void}, {'MONITOR', @val={' \'', 'Synth Capture'}}, {'VIDEO', @void}, {'DIGITAL2', @void}, {'BASS', @void}, {'RADIO', @void}, {'RECLEV', @val={' \'', 'CD Capture'}}, {'LINE3', @val={' \'', 'Capture'}}], 0xcb) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc001}, 0x4000008) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x35, &(0x7f00000003c0)) 05:57:01 executing program 3: recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000040)=""/98, 0x62, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xe}, 0x14}}, 0x0) 05:57:01 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x129000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x3, 0x10000}) 05:57:01 executing program 1: socketpair(0x22, 0x4, 0x83b6, &(0x7f00000003c0)) 05:57:01 executing program 0: socketpair(0x26, 0x5, 0x36, &(0x7f00000003c0)) 05:57:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf}, 0x14}}, 0x0) 05:57:01 executing program 3: mq_open(&(0x7f0000000040)='\xa3y_\xfb\x18\xcd\xfd0\xf0\xc9\x12\x19\xae\xf2Fb\x1a\xab\x11\xa0\xf9\x16\xf2.\xbe\x95\xf1\x854\xa8\x1b\xaa\xdc>J\x9e1]\xed\x0egO\x98Q\x91\xe1F\xed\xf2\xa0\xc3\x14\x19G\x0f\x8f1>\n\x7f\xae\x82\xded\xd0\x8awR<\xa7\x10J\xe5\xbdB\xadT\xe9\x8ceP\xf3 \xf8:!w\xa7\x8c\xda\xf1Z\xefY\xcf\xd9\xa4\xc6\xde\xf2*H\xbbN\x99=\x8a\f\x867', 0x0, 0x38, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) 05:57:01 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x129000) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x3, 0x10000}) 05:57:01 executing program 1: socketpair(0x22, 0x4, 0x83b6, &(0x7f00000003c0)) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x74, r4, 0x8, 0x70bd26, 0x4, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xac}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000044}, 0x90) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x37, &(0x7f00000003c0)) 05:57:02 executing program 1: socketpair(0x22, 0x4, 0x83b6, &(0x7f00000003c0)) 05:57:02 executing program 3: mq_open(&(0x7f0000000040)='\xa3y_\xfb\x18\xcd\xfd0\xf0\xc9\x12\x19\xae\xf2Fb\x1a\xab\x11\xa0\xf9\x16\xf2.\xbe\x95\xf1\x854\xa8\x1b\xaa\xdc>J\x9e1]\xed\x0egO\x98Q\x91\xe1F\xed\xf2\xa0\xc3\x14\x19G\x0f\x8f1>\n\x7f\xae\x82\xded\xd0\x8awR<\xa7\x10J\xe5\xbdB\xadT\xe9\x8ceP\xf3 \xf8:!w\xa7\x8c\xda\xf1Z\xefY\xcf\xd9\xa4\xc6\xde\xf2*H\xbbN\x99=\x8a\f\x867', 0x0, 0x38, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) mq_open(&(0x7f0000000040)='\xa3y_\xfb\x18\xcd\xfd0\xf0\xc9\x12\x19\xae\xf2Fb\x1a\xab\x11\xa0\xf9\x16\xf2.\xbe\x95\xf1\x854\xa8\x1b\xaa\xdc>J\x9e1]\xed\x0egO\x98Q\x91\xe1F\xed\xf2\xa0\xc3\x14\x19G\x0f\x8f1>\n\x7f\xae\x82\xded\xd0\x8awR<\xa7\x10J\xe5\xbdB\xadT\xe9\x8ceP\xf3 \xf8:!w\xa7\x8c\xda\xf1Z\xefY\xcf\xd9\xa4\xc6\xde\xf2*H\xbbN\x99=\x8a\f\x867', 0x0, 0x38, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) (async) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x60}, 0x14}}, 0x0) 05:57:02 executing program 5: syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x129000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x3, 0x10000}) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffd, 0x0) (async) syz_open_dev$dri(&(0x7f0000000040), 0x7, 0x129000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x3, 0x10000}) (async) 05:57:02 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) r6 = eventfd2(0x2, 0x81001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x10000, 0x8, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 3: mq_open(&(0x7f0000000040)='\xa3y_\xfb\x18\xcd\xfd0\xf0\xc9\x12\x19\xae\xf2Fb\x1a\xab\x11\xa0\xf9\x16\xf2.\xbe\x95\xf1\x854\xa8\x1b\xaa\xdc>J\x9e1]\xed\x0egO\x98Q\x91\xe1F\xed\xf2\xa0\xc3\x14\x19G\x0f\x8f1>\n\x7f\xae\x82\xded\xd0\x8awR<\xa7\x10J\xe5\xbdB\xadT\xe9\x8ceP\xf3 \xf8:!w\xa7\x8c\xda\xf1Z\xefY\xcf\xd9\xa4\xc6\xde\xf2*H\xbbN\x99=\x8a\f\x867', 0x0, 0x38, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) mq_open(&(0x7f0000000040)='\xa3y_\xfb\x18\xcd\xfd0\xf0\xc9\x12\x19\xae\xf2Fb\x1a\xab\x11\xa0\xf9\x16\xf2.\xbe\x95\xf1\x854\xa8\x1b\xaa\xdc>J\x9e1]\xed\x0egO\x98Q\x91\xe1F\xed\xf2\xa0\xc3\x14\x19G\x0f\x8f1>\n\x7f\xae\x82\xded\xd0\x8awR<\xa7\x10J\xe5\xbdB\xadT\xe9\x8ceP\xf3 \xf8:!w\xa7\x8c\xda\xf1Z\xefY\xcf\xd9\xa4\xc6\xde\xf2*H\xbbN\x99=\x8a\f\x867', 0x0, 0x38, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400c0, 0x0) (async) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf0}, 0x14}}, 0x0) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x38, &(0x7f00000003c0)) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r1}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) r6 = eventfd2(0x2, 0x81001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x10000, 0x8, r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x2, 0x1, 0xe1e0, 0x9, 0x7, 0x7, 0x7395, 0x6, 0x6, 0xff, 0x3ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc84d, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10002}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x6, r2}) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x300}, 0x14}}, 0x0) 05:57:02 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x39, &(0x7f00000003c0)) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) r6 = eventfd2(0x2, 0x81001) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x10000, 0x8, r6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x2, 0x1, 0xe1e0, 0x9, 0x7, 0x7, 0x7395, 0x6, 0x6, 0xff, 0x3ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc84d, 0x100) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10002}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x6, r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x2, 0x1, 0xe1e0, 0x9, 0x7, 0x7, 0x7395, 0x6, 0x6, 0xff, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) (async) syz_open_dev$dri(&(0x7f00000000c0), 0xc84d, 0x100) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10002}) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x6, r2}) (async) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x700}, 0x14}}, 0x0) 05:57:02 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x3a, &(0x7f00000003c0)) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000)=0x4b, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0xd}) socketpair(0x6, 0x2, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xbad, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048800}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000000)={0x0, 0x2, 0x1, 0xe1e0, 0x9, 0x7, 0x7, 0x7395, 0x6, 0x6, 0xff, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0xc84d, 0x100) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x0, 0x0, 0x10002}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x6, r2}) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x3b, &(0x7f00000003c0)) 05:57:02 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xe00}, 0x14}}, 0x0) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_open(&(0x7f0000000080)='\x00', 0x1, 0x140, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0xffffffffffffff17}) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x20) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000)=0x4b, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0xd}) (async) socketpair(0x6, 0x2, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xbad, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048800}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x45, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250300000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x3ff, 0x2, 0x1, 0x8000, 0x9, 0x4, 0x8, 0x4, 0x9, 0x9, 0x5}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="558b2d0613f99917b7043877cbfb97a4a2b7586e05292dcb4e4d057825eb0f182753fd5091cbd7c4203afb9f6b6631aa9be4c0a8a8255f6952f1adfdbc11c61aef5561f2ebdd09c89f0ef505403a7b9f37", 0x51}) 05:57:02 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf00}, 0x14}}, 0x0) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_open(&(0x7f0000000080)='\x00', 0x1, 0x140, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0xffffffffffffff17}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x20) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x3c, &(0x7f00000003c0)) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x45, 0x10000}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250300000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x3ff, 0x2, 0x1, 0x8000, 0x9, 0x4, 0x8, 0x4, 0x9, 0x9, 0x5}) (async) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="558b2d0613f99917b7043877cbfb97a4a2b7586e05292dcb4e4d057825eb0f182753fd5091cbd7c4203afb9f6b6631aa9be4c0a8a8255f6952f1adfdbc11c61aef5561f2ebdd09c89f0ef505403a7b9f37", 0x51}) 05:57:02 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000300)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000)=0x4b, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x0, 0x2, 0xd}) (async) socketpair(0x6, 0x2, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r6, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xbad, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048800}, 0x80) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x3d, &(0x7f00000003c0)) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x4b72}, 0x14}}, 0x0) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_open(&(0x7f0000000080)='\x00', 0x1, 0x140, &(0x7f00000000c0)={0x0, 0x1, 0x7, 0xffffffffffffff17}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x20) 05:57:02 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xf0, &(0x7f0000000040)=0x2) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x45, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250300000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x3ff, 0x2, 0x1, 0x8000, 0x9, 0x4, 0x8, 0x4, 0x9, 0x9, 0x5}) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="558b2d0613f99917b7043877cbfb97a4a2b7586e05292dcb4e4d057825eb0f182753fd5091cbd7c4203afb9f6b6631aa9be4c0a8a8255f6952f1adfdbc11c61aef5561f2ebdd09c89f0ef505403a7b9f37", 0x51}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x45, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000002", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250300000008000b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000040)={0x0, 0x3ff, 0x2, 0x1, 0x8000, 0x9, 0x4, 0x8, 0x4, 0x9, 0x9, 0x5}) (async) syz_open_dev$dri(&(0x7f00000001c0), 0x5, 0x80000) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000200)="558b2d0613f99917b7043877cbfb97a4a2b7586e05292dcb4e4d057825eb0f182753fd5091cbd7c4203afb9f6b6631aa9be4c0a8a8255f6952f1adfdbc11c61aef5561f2ebdd09c89f0ef505403a7b9f37", 0x51}) (async) 05:57:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x6000}, 0x14}}, 0x0) 05:57:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0xe0b3, 0x2) read$midi(r3, &(0x7f0000000140)=""/34, 0x22) 05:57:02 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x4010, 0xffffffffffffffff, 0xb9000) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffda3) 05:57:02 executing program 0: socketpair(0x26, 0x5, 0x3e, &(0x7f00000003c0)) 05:57:02 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xf0, &(0x7f0000000040)=0x2) 05:57:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2e4400, 0x0) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x3}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0xe0b3, 0x2) read$midi(r3, &(0x7f0000000140)=""/34, 0x22) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x724b}, 0x14}}, 0x0) 05:57:03 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x4010, 0xffffffffffffffff, 0xb9000) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffda3) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x4010, 0xffffffffffffffff, 0xb9000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$l2tp(r0, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffda3) (async) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x41, &(0x7f00000003c0)) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2e4400, 0x0) (rerun: 32) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x3}, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:03 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xf0, &(0x7f0000000040)=0x2) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0xf0, &(0x7f0000000040)=0x2) (async) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40500) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0xe0b3, 0x2) read$midi(r3, &(0x7f0000000140)=""/34, 0x22) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40500) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) syz_open_dev$dmmidi(&(0x7f00000000c0), 0xe0b3, 0x2) (async) read$midi(r3, &(0x7f0000000140)=""/34, 0x22) (async) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf000}, 0x14}}, 0x0) 05:57:03 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x4010, 0xffffffffffffffff, 0xb9000) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xfffffffffffffda3) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x42, &(0x7f00000003c0)) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2e4400, 0x0) (rerun: 32) connect$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @empty, 0x3}, 0x10) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:03 executing program 1: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x30000}, 0x14}}, 0x0) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x5, 0x3, 0x6, 0x7, 0x54e7, 0xc1, 0x5, 0x10001, 0xa, 0xfff], 0xa, 0x80000}) 05:57:03 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x40, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x43, &(0x7f00000003c0)) 05:57:03 executing program 1: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socketpair(0x22, 0x80803, 0x8ce, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff4583}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x7, 0x8, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x1, 0x1, 0x296, 0x8000, 0x7fff], 0x6, 0x41800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x5, 0x3, 0x6, 0x7, 0x54e7, 0xc1, 0x5, 0x10001, 0xa, 0xfff], 0xa, 0x80000}) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf0ffff}, 0x14}}, 0x0) 05:57:03 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x40, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:03 executing program 1: socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x44, &(0x7f00000003c0)) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x1000000}, 0x14}}, 0x0) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x5, 0x3, 0x6, 0x7, 0x54e7, 0xc1, 0x5, 0x10001, 0xa, 0xfff], 0xa, 0x80000}) (rerun: 64) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socketpair(0x22, 0x80803, 0x8ce, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff4583}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x7, 0x8, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x1, 0x1, 0x296, 0x8000, 0x7fff], 0x6, 0x41800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) socketpair(0x22, 0x80803, 0x8ce, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff4583}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x7, 0x8, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x1, 0x1, 0x296, 0x8000, 0x7fff], 0x6, 0x41800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:03 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x40, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x408200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000380)=[0x3, 0x2fe4c6ac, 0x6, 0x1, 0x8f, 0x101, 0x9], 0x7, 0x800}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000015}, 0x20000800) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9462}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xbc02}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc018}, 0x8800) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x45, &(0x7f00000003c0)) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x2000000}, 0x14}}, 0x0) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000000)='\xc4\xd7}\xad\xf8*p\xaa\x0f-\xc3u\xf3U@\xfe\xa95\x97\x92\xbd0\xa1y\xe9&\xa3\x19\xf7S\xbb\xf1\xc2$?\x86\xc6\xbc\x8c\x91\'\x04Ly\xae\x88\xaa\x96A\xa6}\xc7\x14\xac\xb3\x83\x11>b\xa1\xb1o\x1f5W\'', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socketpair(0x22, 0x80803, 0x8ce, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x140, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff4583}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r5, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x1c, 0x17, {0x7, 0x8, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}}}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x5, 0x1, 0x1, 0x296, 0x8000, 0x7fff], 0x6, 0x41800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:03 executing program 3: getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000000), 0x1, 0x20, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000811) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x408200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000380)=[0x3, 0x2fe4c6ac, 0x6, 0x1, 0x8f, 0x101, 0x9], 0x7, 0x800}) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000015}, 0x20000800) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9462}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xbc02}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc018}, 0x8800) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x46, &(0x7f00000003c0)) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x3000000}, 0x14}}, 0x0) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000000)='\xc4\xd7}\xad\xf8*p\xaa\x0f-\xc3u\xf3U@\xfe\xa95\x97\x92\xbd0\xa1y\xe9&\xa3\x19\xf7S\xbb\xf1\xc2$?\x86\xc6\xbc\x8c\x91\'\x04Ly\xae\x88\xaa\x96A\xa6}\xc7\x14\xac\xb3\x83\x11>b\xa1\xb1o\x1f5W\'', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) mq_open(&(0x7f0000000000)='\xc4\xd7}\xad\xf8*p\xaa\x0f-\xc3u\xf3U@\xfe\xa95\x97\x92\xbd0\xa1y\xe9&\xa3\x19\xf7S\xbb\xf1\xc2$?\x86\xc6\xbc\x8c\x91\'\x04Ly\xae\x88\xaa\x96A\xa6}\xc7\x14\xac\xb3\x83\x11>b\xa1\xb1o\x1f5W\'', 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:03 executing program 3: getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000000), 0x1, 0x20, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000811) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x3, 0x5, 0x1, 0x8], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000340)={0x0, 0x35}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10004}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3e377292}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc091}, 0x50) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 05:57:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000340), 0x4, 0x408200) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000400)={&(0x7f0000000380)=[0x3, 0x2fe4c6ac, 0x6, 0x1, 0x8f, 0x101, 0x9], 0x7, 0x800}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000015}, 0x20000800) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9462}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xbc02}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0xc018}, 0x8800) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x47, &(0x7f00000003c0)) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x4000000}, 0x14}}, 0x0) 05:57:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000000)='\xc4\xd7}\xad\xf8*p\xaa\x0f-\xc3u\xf3U@\xfe\xa95\x97\x92\xbd0\xa1y\xe9&\xa3\x19\xf7S\xbb\xf1\xc2$?\x86\xc6\xbc\x8c\x91\'\x04Ly\xae\x88\xaa\x96A\xa6}\xc7\x14\xac\xb3\x83\x11>b\xa1\xb1o\x1f5W\'', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) mq_open(&(0x7f0000000000)='\xc4\xd7}\xad\xf8*p\xaa\x0f-\xc3u\xf3U@\xfe\xa95\x97\x92\xbd0\xa1y\xe9&\xa3\x19\xf7S\xbb\xf1\xc2$?\x86\xc6\xbc\x8c\x91\'\x04Ly\xae\x88\xaa\x96A\xa6}\xc7\x14\xac\xb3\x83\x11>b\xa1\xb1o\x1f5W\'', 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:03 executing program 3: getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mq_open(&(0x7f0000000000), 0x1, 0x20, 0x0) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4000811) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) 05:57:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x3, 0x5, 0x1, 0x8], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000340)={0x0, 0x35}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10004}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3e377292}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc091}, 0x50) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 05:57:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x7000000}, 0x14}}, 0x0) 05:57:03 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x1) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12401000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0xffff6ea3, @bearer=@l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 05:57:03 executing program 0: socketpair(0x26, 0x5, 0x48, &(0x7f00000003c0)) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x1, 0x0, "f93bb2fad5efc8b0faa15abf31da415e9b629018a615e02de9ff07f6a10408e59273f0dd76be566647e416c771736fa45e1be8fda160d98f79b5de57"}, 0x44, 0x44, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x2, 0x1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000000)={0x3, 0x20, 0x7fff, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x49, &(0x7f00000003c0)) 05:57:04 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x1) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12401000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0xffff6ea3, @bearer=@l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x1, 0x0, "f93bb2fad5efc8b0faa15abf31da415e9b629018a615e02de9ff07f6a10408e59273f0dd76be566647e416c771736fa45e1be8fda160d98f79b5de57"}, 0x44, 0x44, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x2, 0x1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000000)={0x3, 0x20, 0x7fff, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) sendto$isdn(r1, &(0x7f0000000140)={0x1, 0x0, "f93bb2fad5efc8b0faa15abf31da415e9b629018a615e02de9ff07f6a10408e59273f0dd76be566647e416c771736fa45e1be8fda160d98f79b5de57"}, 0x44, 0x44, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x2, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000000)={0x3, 0x20, 0x7fff, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x8000000}, 0x14}}, 0x0) 05:57:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000140)={0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x3, 0x5, 0x1, 0x8], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000300)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000340)={0x0, 0x35}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x47, 0x10004}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3e377292}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc091}, 0x50) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 05:57:04 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4a, &(0x7f00000003c0)) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xe000000}, 0x14}}, 0x0) 05:57:04 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x1) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12401000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0xffff6ea3, @bearer=@l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x1) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12401000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x1c, 0x18, {0xffff6ea3, @bearer=@l2={'eth', 0x3a, 'veth0_to_team\x00'}}}}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendto$isdn(r1, &(0x7f0000000140)={0x1, 0x0, "f93bb2fad5efc8b0faa15abf31da415e9b629018a615e02de9ff07f6a10408e59273f0dd76be566647e416c771736fa45e1be8fda160d98f79b5de57"}, 0x44, 0x44, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x2, 0x1}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000000)={0x3, 0x20, 0x7fff, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) sendto$isdn(r1, &(0x7f0000000140)={0x1, 0x0, "f93bb2fad5efc8b0faa15abf31da415e9b629018a615e02de9ff07f6a10408e59273f0dd76be566647e416c771736fa45e1be8fda160d98f79b5de57"}, 0x44, 0x44, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7fff, 0x2, 0x1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000000)={0x3, 0x20, 0x7fff, 0x8000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8, 0x12b39c5a}) 05:57:04 executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x800) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf000000}, 0x14}}, 0x0) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4b, &(0x7f00000003c0)) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8, 0x12b39c5a}) 05:57:04 executing program 1: socketpair(0x5, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4c, &(0x7f00000003c0)) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x20}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8, 0x12b39c5a}) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x60000000}, 0x14}}, 0x0) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x20}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/153, 0x99) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10000, 0x5, 0x10000}) read$eventfd(r0, &(0x7f0000000040), 0x8) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4d, &(0x7f00000003c0)) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x724b0000}, 0x14}}, 0x0) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) 05:57:04 executing program 1: socketpair(0x5, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0x5, 0x5, 0x3f, &(0x7f00000003c0)) (async) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4e, &(0x7f00000003c0)) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x9effffff}, 0x14}}, 0x0) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/153, 0x99) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10000, 0x5, 0x10000}) read$eventfd(r0, &(0x7f0000000040), 0x8) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) read$proc_mixer(r0, &(0x7f00000000c0)=""/153, 0x99) (async) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10000, 0x5, 0x10000}) (async) read$eventfd(r0, &(0x7f0000000040), 0x8) (async) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x20}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000000)={0x0, 0x20}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040), 0x2) (async) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xf0ffffff}, 0x14}}, 0x0) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x4f, &(0x7f00000003c0)) 05:57:04 executing program 5: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) read$proc_mixer(r0, &(0x7f00000000c0)=""/153, 0x99) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10000, 0x5, 0x10000}) read$eventfd(r0, &(0x7f0000000040), 0x8) 05:57:04 executing program 1: socketpair(0x5, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xfcffffff}, 0x14}}, 0x0) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000040)="b2a1ee91c76552c010a1d2f16f52afaadc719159b8fadbebf0e90494b037b6ad60d3168b6d8f93e30e5208f5cd111b8a4d79b714a0eaffdda3a1792ecf9015b26a5c8052cc4fd4fc847611a70f3b048b5d2ee571698a7acfb8551f78c2538b20a006df7606766e7ef1e7b3655ceb6b7c10fbee6eff321f3d2455d7b0d784b0e4802e1bbe58e53e0f7444de08e47b0f", 0x8f, 0x2, &(0x7f0000000100)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x50, &(0x7f00000003c0)) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x51, &(0x7f00000003c0)) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xfffff000}, 0x14}}, 0x0) 05:57:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x709d2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x4000) 05:57:04 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_timedsend(r0, &(0x7f0000000040)="b2a1ee91c76552c010a1d2f16f52afaadc719159b8fadbebf0e90494b037b6ad60d3168b6d8f93e30e5208f5cd111b8a4d79b714a0eaffdda3a1792ecf9015b26a5c8052cc4fd4fc847611a70f3b048b5d2ee571698a7acfb8551f78c2538b20a006df7606766e7ef1e7b3655ceb6b7c10fbee6eff321f3d2455d7b0d784b0e4802e1bbe58e53e0f7444de08e47b0f", 0x8f, 0x2, &(0x7f0000000100)={0x77359400}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x709d2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x4000) 05:57:04 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) (async) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x52, &(0x7f00000003c0)) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xffffff7f}, 0x14}}, 0x0) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_timedsend(r0, &(0x7f0000000040)="b2a1ee91c76552c010a1d2f16f52afaadc719159b8fadbebf0e90494b037b6ad60d3168b6d8f93e30e5208f5cd111b8a4d79b714a0eaffdda3a1792ecf9015b26a5c8052cc4fd4fc847611a70f3b048b5d2ee571698a7acfb8551f78c2538b20a006df7606766e7ef1e7b3655ceb6b7c10fbee6eff321f3d2455d7b0d784b0e4802e1bbe58e53e0f7444de08e47b0f", 0x8f, 0x2, &(0x7f0000000100)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x709d2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x4000) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x709d2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x4000) (async) 05:57:04 executing program 0: socketpair(0x26, 0x5, 0x53, &(0x7f00000003c0)) 05:57:04 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffff9) (async) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000)) (async) 05:57:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x6, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000000140)={r4}) (async) 05:57:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xffffff9e}, 0x14}}, 0x0) 05:57:04 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x4b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socketpair(0xf, 0x80000, 0x7ffb, &(0x7f0000000000)) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x54, &(0x7f00000003c0)) 05:57:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0xae, 0x2, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xfffffff0}, 0x14}}, 0x0) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x4b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) socketpair(0xf, 0x80000, 0x7ffb, &(0x7f0000000000)) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xfffffffc}, 0x14}}, 0x0) 05:57:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0xae, 0x2, 0x0, 0x0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x55, &(0x7f00000003c0)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x1f, 0x2000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:05 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) socketpair(0xf, 0x80000, 0x7ffb, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) socketpair(0xf, 0x80000, 0x7ffb, &(0x7f0000000000)) (async) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0xffffffff}, 0x14}}, 0x0) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x4b, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:05 executing program 4: syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0xae, 0x2, 0x0, 0x0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x56, &(0x7f00000003c0)) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x0}}, 0x14}}, 0x0) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) fstat(r0, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4401, 0xed, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x3}) 05:57:05 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x200005, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x57, &(0x7f00000003c0)) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) fstat(r0, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4401, 0xed, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x3}) 05:57:05 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x200005, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) (async) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) fstat(r0, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x4401, 0xed, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x800) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x3}) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x58, &(0x7f00000003c0)) 05:57:05 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async, rerun: 64) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x200005, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:05 executing program 3: mq_open(&(0x7f0000000180)='\x80?\xa4\xd2,\x04(-\x93&KE/\fLBF\xe3\xfd\xb8@\xe5\xca\x13\xe4\xb6\xfd\xff\xe0\x1a\'d\xc4\xf8\x81\xc9\xef\xc2\'\xfb\xfe\nP\a5N\xf7\x8b\'\x1c\x87\x12h\x84}\xa1\v\'O\xb1o\xde-f\x17\xed\x16\xe4\x8f\xca\xe1J\xef\xf8I\xf3\x11\x9c\x9b\x03\b\x03+\x18\x92\xb9\xb0\xba\xa3P\b\xafh?\xf6\x95\xe8\x83F\x9d\xe8Lr\x98\xa32\x00\xbd\xf2\x81\xceK\xaf\x7fKP\xdcc\x7f\x9f\xd0\xa8\x16\xc3H.5\x80\xd4\xa9u`\x86\x85\xae3m\x1cB\xce', 0x1, 0x23, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x59, &(0x7f00000003c0)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x20c, 0x10004}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 05:57:05 executing program 1: socketpair(0x25, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) 05:57:05 executing program 3: mq_open(&(0x7f0000000180)='\x80?\xa4\xd2,\x04(-\x93&KE/\fLBF\xe3\xfd\xb8@\xe5\xca\x13\xe4\xb6\xfd\xff\xe0\x1a\'d\xc4\xf8\x81\xc9\xef\xc2\'\xfb\xfe\nP\a5N\xf7\x8b\'\x1c\x87\x12h\x84}\xa1\v\'O\xb1o\xde-f\x17\xed\x16\xe4\x8f\xca\xe1J\xef\xf8I\xf3\x11\x9c\x9b\x03\b\x03+\x18\x92\xb9\xb0\xba\xa3P\b\xafh?\xf6\x95\xe8\x83F\x9d\xe8Lr\x98\xa32\x00\xbd\xf2\x81\xceK\xaf\x7fKP\xdcc\x7f\x9f\xd0\xa8\x16\xc3H.5\x80\xd4\xa9u`\x86\x85\xae3m\x1cB\xce', 0x1, 0x23, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5a, &(0x7f00000003c0)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x20c, 0x10004}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x20c, 0x10004}) (async) 05:57:05 executing program 1: socketpair(0x25, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5b, &(0x7f00000003c0)) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x20c, 0x10004}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x20c, 0x10004}) (async) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 05:57:05 executing program 1: socketpair(0x25, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5c, &(0x7f00000003c0)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x8000000000000001}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000180)={0xfb3a, 0x3, &(0x7f00000000c0)=[0xe1, 0x3, 0x8000], &(0x7f0000000100)=[0x5], &(0x7f0000000140)=[0x1f, 0x5, 0x2, 0x1, 0x5, 0x0, 0x100]}) 05:57:05 executing program 3: mq_open(&(0x7f0000000180)='\x80?\xa4\xd2,\x04(-\x93&KE/\fLBF\xe3\xfd\xb8@\xe5\xca\x13\xe4\xb6\xfd\xff\xe0\x1a\'d\xc4\xf8\x81\xc9\xef\xc2\'\xfb\xfe\nP\a5N\xf7\x8b\'\x1c\x87\x12h\x84}\xa1\v\'O\xb1o\xde-f\x17\xed\x16\xe4\x8f\xca\xe1J\xef\xf8I\xf3\x11\x9c\x9b\x03\b\x03+\x18\x92\xb9\xb0\xba\xa3P\b\xafh?\xf6\x95\xe8\x83F\x9d\xe8Lr\x98\xa32\x00\xbd\xf2\x81\xceK\xaf\x7fKP\xdcc\x7f\x9f\xd0\xa8\x16\xc3H.5\x80\xd4\xa9u`\x86\x85\xae3m\x1cB\xce', 0x1, 0x23, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x6}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 05:57:05 executing program 1: socketpair(0x26, 0xa, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5d, &(0x7f00000003c0)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x8000000000000001}) (async) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000180)={0xfb3a, 0x3, &(0x7f00000000c0)=[0xe1, 0x3, 0x8000], &(0x7f0000000100)=[0x5], &(0x7f0000000140)=[0x1f, 0x5, 0x2, 0x1, 0x5, 0x0, 0x100]}) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0xb43b, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5e, &(0x7f00000003c0)) 05:57:05 executing program 1: socketpair(0x26, 0xa, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:05 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0xb43b, 0x4) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 05:57:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000000)={0x0, 0x8000000000000001}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000180)={0xfb3a, 0x3, &(0x7f00000000c0)=[0xe1, 0x3, 0x8000], &(0x7f0000000100)=[0x5], &(0x7f0000000140)=[0x1f, 0x5, 0x2, 0x1, 0x5, 0x0, 0x100]}) 05:57:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 05:57:05 executing program 0: socketpair(0x26, 0x5, 0x5f, &(0x7f00000003c0)) 05:57:06 executing program 1: socketpair(0x26, 0xa, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0xb43b, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x80) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x60, &(0x7f00000003c0)) 05:57:06 executing program 1: socketpair(0x11, 0x80000, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0x7, 0x4) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x61, &(0x7f00000003c0)) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=']\x00', 0x40, 0x120, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x80}) mq_timedreceive(r0, &(0x7f00000000c0)=""/46, 0x2e, 0x800, &(0x7f0000000100)={0x0, 0x3938700}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) 05:57:06 executing program 1: socketpair(0x11, 0x80000, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) socketpair(0x11, 0x80000, 0x6, &(0x7f00000003c0)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) (async) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x20000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = mq_open(&(0x7f0000000040)=']\x00', 0x40, 0x120, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x80}) mq_timedreceive(r0, &(0x7f00000000c0)=""/46, 0x2e, 0x800, &(0x7f0000000100)={0x0, 0x3938700}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x62, &(0x7f00000003c0)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xac6d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 1: socketpair(0x11, 0x80000, 0x6, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) socketpair(0x11, 0x80000, 0x6, &(0x7f00000003c0)) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) (async) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x63, &(0x7f00000003c0)) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000040)=']\x00', 0x40, 0x120, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x80}) mq_timedreceive(r0, &(0x7f00000000c0)=""/46, 0x2e, 0x800, &(0x7f0000000100)={0x0, 0x3938700}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) mq_open(&(0x7f0000000040)=']\x00', 0x40, 0x120, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x80}) (async) mq_timedreceive(r0, &(0x7f00000000c0)=""/46, 0x2e, 0x800, &(0x7f0000000100)={0x0, 0x3938700}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), r1) (async) 05:57:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xac6d, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x64, &(0x7f00000003c0)) 05:57:06 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x43}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040)=0x101, 0x4) 05:57:06 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x43}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) 05:57:06 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xac6d, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xfff, &(0x7f0000000040)=0x2) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250200000014001f0000000000000000000000ffffac1414bb0c00100009000000000000000500120005000000050006007c00000008000b000100000005000d0000000000050013000000132b5dbde621f94b0000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000200)={0x2, 0x8, &(0x7f0000000140)=[0x59, 0x4, 0x8, 0xb228, 0x9, 0x850, 0x3, 0xa15d], &(0x7f0000000180)=[0x7, 0x1000, 0x5, 0x3ff, 0xae25], &(0x7f00000001c0)=[0x3f, 0xff]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000280)={r3}) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x65, &(0x7f00000003c0)) 05:57:06 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x68402000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x43}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x800) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 32) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040)=0x101, 0x4) (rerun: 32) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x6}) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250200000014001f0000000000000000000000ffffac1414bb0c00100009000000000000000500120005000000050006007c00000008000b000100000005000d0000000000050013000000132b5dbde621f94b0000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000200)={0x2, 0x8, &(0x7f0000000140)=[0x59, 0x4, 0x8, 0xb228, 0x9, 0x850, 0x3, 0xa15d], &(0x7f0000000180)=[0x7, 0x1000, 0x5, 0x3ff, 0xae25], &(0x7f00000001c0)=[0x3f, 0xff]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000280)={r3}) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x66, &(0x7f00000003c0)) 05:57:06 executing program 1: socketpair(0x15, 0x6, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2b050b83a6d17651}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040)=0x101, 0x4) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x67, &(0x7f00000003c0)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x2}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x6}) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250200000014001f0000000000000000000000ffffac1414bb0c00100009000000000000000500120005000000050006007c00000008000b000100000005000d0000000000050013000000132b5dbde621f94b0000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) r2 = syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000200)={0x2, 0x8, &(0x7f0000000140)=[0x59, 0x4, 0x8, 0xb228, 0x9, 0x850, 0x3, 0xa15d], &(0x7f0000000180)=[0x7, 0x1000, 0x5, 0x3ff, 0xae25], &(0x7f00000001c0)=[0x3f, 0xff]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000280)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf250200000014001f0000000000000000000000ffffac1414bb0c00100009000000000000000500120005000000050006007c00000008000b000100000005000d0000000000050013000000132b5dbde621f94b0000"], 0x64}, 0x1, 0x0, 0x0, 0x24000001}, 0x20000000) (async) syz_open_dev$dri(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000200)={0x2, 0x8, &(0x7f0000000140)=[0x59, 0x4, 0x8, 0xb228, 0x9, 0x850, 0x3, 0xa15d], &(0x7f0000000180)=[0x7, 0x1000, 0x5, 0x3ff, 0xae25], &(0x7f00000001c0)=[0x3f, 0xff]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f0000000240)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000280)={r3}) (async) 05:57:06 executing program 1: socketpair(0x15, 0x6, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2b050b83a6d17651}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) socketpair(0x15, 0x6, 0x7, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2b050b83a6d17651}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) (async) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='#', 0x1, 0x108, &(0x7f0000000080)={0x0, 0xb2e, 0x4, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x68, &(0x7f00000003c0)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x3}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x6}) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "e6ed5efd4c0e1dd718fd0c87d6428a7d92ab06f36ec435cf4d5d4576c3967939"}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1f, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:06 executing program 1: socketpair(0x15, 0x6, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2b050b83a6d17651}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44084}, 0x20000000) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fbf, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='#', 0x1, 0x108, &(0x7f0000000080)={0x0, 0xb2e, 0x4, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x69, &(0x7f00000003c0)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x4}}, 0x14}}, 0x0) 05:57:06 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0x22, 0x80000, 0x63d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x9c}}, 0xf27019f9b98f811b) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "e6ed5efd4c0e1dd718fd0c87d6428a7d92ab06f36ec435cf4d5d4576c3967939"}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1f, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fbf, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000000), 0x7fbf, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) (async) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x6a, &(0x7f00000003c0)) 05:57:06 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)='#', 0x1, 0x108, &(0x7f0000000080)={0x0, 0xb2e, 0x4, 0x7}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000040)='#', 0x1, 0x108, &(0x7f0000000080)={0x0, 0xb2e, 0x4, 0x7}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x7}}, 0x14}}, 0x0) 05:57:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x1000, "e6ed5efd4c0e1dd718fd0c87d6428a7d92ab06f36ec435cf4d5d4576c3967939"}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x1f, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:06 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0x22, 0x80000, 0x63d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x9c}}, 0xf27019f9b98f811b) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socketpair(0x22, 0x80000, 0x63d, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x9c}}, 0xf27019f9b98f811b) (async) 05:57:06 executing program 0: socketpair(0x26, 0x5, 0x6b, &(0x7f00000003c0)) 05:57:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x8}}, 0x14}}, 0x0) 05:57:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7fbf, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000000), 0x7fbf, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xffff, 0x47, 0x10000}) (async) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x2004) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x6c, &(0x7f00000003c0)) 05:57:07 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0x22, 0x80000, 0x63d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x9c}}, 0xf27019f9b98f811b) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socketpair(0x22, 0x80000, 0x63d, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x39}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x9c}}, 0xf27019f9b98f811b) (async) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0xd3e, 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0xe}}, 0x14}}, 0x0) 05:57:07 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xab}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048800}, 0x40) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xdd818b193eeb81e2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8801) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x2004) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x6d, &(0x7f00000003c0)) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x101, 0x2, 0x9, 0x3, 0x4, 0x3], 0x7, 0x7, 0x1800000, 0x7fffffff, 0x6, 0x8637, 0xf8be, {0x5, 0x0, 0xfffa, 0x101, 0xf7, 0x1, 0x400, 0x8001, 0x3f, 0x5, 0xfc00, 0x0, 0x800, 0xa6, "e9da43c9f5f5a5d621a340f2d6780d2f258647e2681d6af4d13c366b029d1cc3"}}) socketpair(0x26, 0x80000, 0x7fff, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={0x2}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 64) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0xd3e, 0x4) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 64) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0xf}}, 0x14}}, 0x0) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x101, 0x2, 0x9, 0x3, 0x4, 0x3], 0x7, 0x7, 0x1800000, 0x7fffffff, 0x6, 0x8637, 0xf8be, {0x5, 0x0, 0xfffa, 0x101, 0xf7, 0x1, 0x400, 0x8001, 0x3f, 0x5, 0xfc00, 0x0, 0x800, 0xa6, "e9da43c9f5f5a5d621a340f2d6780d2f258647e2681d6af4d13c366b029d1cc3"}}) (async) socketpair(0x26, 0x80000, 0x7fff, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={0x2}) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x2004) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2c0c0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:07 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xab}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048800}, 0x40) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xdd818b193eeb81e2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8801) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xab}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048800}, 0x40) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xdd818b193eeb81e2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8801) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x6e, &(0x7f00000003c0)) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f00000000c0)=0xd3e, 0x4) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000000)={0x0, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x101, 0x2, 0x9, 0x3, 0x4, 0x3], 0x7, 0x7, 0x1800000, 0x7fffffff, 0x6, 0x8637, 0xf8be, {0x5, 0x0, 0xfffa, 0x101, 0xf7, 0x1, 0x400, 0x8001, 0x3f, 0x5, 0xfc00, 0x0, 0x800, 0xa6, "e9da43c9f5f5a5d621a340f2d6780d2f258647e2681d6af4d13c366b029d1cc3"}}) socketpair(0x26, 0x80000, 0x7fff, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={0x2}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000000)=[0x6, 0x101, 0x2, 0x9, 0x3, 0x4, 0x3], 0x7, 0x7, 0x1800000, 0x7fffffff, 0x6, 0x8637, 0xf8be, {0x5, 0x0, 0xfffa, 0x101, 0xf7, 0x1, 0x400, 0x8001, 0x3f, 0x5, 0xfc00, 0x0, 0x800, 0xa6, "e9da43c9f5f5a5d621a340f2d6780d2f258647e2681d6af4d13c366b029d1cc3"}}) (async) socketpair(0x26, 0x80000, 0x7fff, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)={0x2}) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) (async) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x9, 0x3, 0x2, 0x10000], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xdd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x60}}, 0x14}}, 0x0) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x6f, &(0x7f00000003c0)) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:07 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x4c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xab}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24048800}, 0x40) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xdd818b193eeb81e2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x8801) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:07 executing program 1: socketpair(0x11, 0x1, 0x3f, &(0x7f00000003c0)) socketpair(0x1f, 0x1, 0x4, &(0x7f0000000000)) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)={0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x9, 0x3, 0x2, 0x10000], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xdd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x70, &(0x7f00000003c0)) 05:57:07 executing program 1: socketpair(0x11, 0x1, 0x3f, &(0x7f00000003c0)) socketpair(0x1f, 0x1, 0x4, &(0x7f0000000000)) socketpair(0x11, 0x1, 0x3f, &(0x7f00000003c0)) (async) socketpair(0x1f, 0x1, 0x4, &(0x7f0000000000)) (async) 05:57:07 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)={0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x9, 0x3, 0x2, 0x10000], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xdd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f00000002c0)={0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x2, 0x9, 0x3, 0x2, 0x10000], 0x5, 0x80800}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xdd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xdd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x4, 0x4, 0x7, 0x0, 0xb88], 0x5, 0x100800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r3, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000000)={0x9cdc, 0x1, 0x7fffffff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000280)=[0x7bc, 0x6, 0x5, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x2}}, 0x14}}, 0x0) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x71, &(0x7f00000003c0)) 05:57:07 executing program 1: socketpair(0x11, 0x1, 0x3f, &(0x7f00000003c0)) (async) socketpair(0x1f, 0x1, 0x4, &(0x7f0000000000)) 05:57:07 executing program 5: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004894) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) fstat(r0, &(0x7f0000000000)) 05:57:07 executing program 3: mq_open(&(0x7f0000000180)='\t}@A\x1a3%M\x1a\xd5\xd7\x9a\xfd{4\xf11W\xca\x17w\xcdr\x02\xcf\xad\"\x15\x18\xca\xfc\xea[\x1a\x03\xbf\x97\xe0\xbbj~\x80\xf8&\xd9;\x1c\x1296\xb1.\f\xba0\xb3\x9d\x8e3\x8d\x92\xb2\x03\x98*g\x8du\x14\x89E\xd3\xfb\xa1Z<\xb6\x82\xb1\x00\x13\xf5\xc5\xd5\x02\xebqK)\xa6\x9f\x15\xdd\xb7\xc8\x16TZ \xc4P\x94\xbdF\x06\xffNtOGf\xcb\xda\'\x1bn\x13\x98\xa6b\x9b\xe9\xe7\xb4\xfe\xca\xc5\x10\xff)\\T\x01h\xcb\x04uC%\t\x7f\xc1\x1d?w;\xc8\x8a', 0x0, 0x128, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/251, 0xfb, 0x835, &(0x7f0000000140)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x3}}, 0x14}}, 0x0) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x72, &(0x7f00000003c0)) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = eventfd2(0x8001, 0x100001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x4, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2022081}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="260128bd7000fedbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="08000300907710b623e638ee45eba73db498f7487658d481b197f169b29c2c19531fff8dd6ece87fa9f39d209a4a5a246949", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000002}, 0x40014) socketpair(0x22, 0x80000, 0x3f, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ff2bdf250100000000000000014100000018001700000016000001007564703a65797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffa3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x5}, 0x20004001) 05:57:07 executing program 5: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004894) (async, rerun: 32) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) fstat(r0, &(0x7f0000000000)) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x4, 0x4, 0x7, 0x0, 0xb88], 0x5, 0x100800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r3, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000000)={0x9cdc, 0x1, 0x7fffffff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000280)=[0x7bc, 0x6, 0x5, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4}}, 0x14}}, 0x0) 05:57:07 executing program 3: mq_open(&(0x7f0000000180)='\t}@A\x1a3%M\x1a\xd5\xd7\x9a\xfd{4\xf11W\xca\x17w\xcdr\x02\xcf\xad\"\x15\x18\xca\xfc\xea[\x1a\x03\xbf\x97\xe0\xbbj~\x80\xf8&\xd9;\x1c\x1296\xb1.\f\xba0\xb3\x9d\x8e3\x8d\x92\xb2\x03\x98*g\x8du\x14\x89E\xd3\xfb\xa1Z<\xb6\x82\xb1\x00\x13\xf5\xc5\xd5\x02\xebqK)\xa6\x9f\x15\xdd\xb7\xc8\x16TZ \xc4P\x94\xbdF\x06\xffNtOGf\xcb\xda\'\x1bn\x13\x98\xa6b\x9b\xe9\xe7\xb4\xfe\xca\xc5\x10\xff)\\T\x01h\xcb\x04uC%\t\x7f\xc1\x1d?w;\xc8\x8a', 0x0, 0x128, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/251, 0xfb, 0x835, &(0x7f0000000140)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mq_open(&(0x7f0000000180)='\t}@A\x1a3%M\x1a\xd5\xd7\x9a\xfd{4\xf11W\xca\x17w\xcdr\x02\xcf\xad\"\x15\x18\xca\xfc\xea[\x1a\x03\xbf\x97\xe0\xbbj~\x80\xf8&\xd9;\x1c\x1296\xb1.\f\xba0\xb3\x9d\x8e3\x8d\x92\xb2\x03\x98*g\x8du\x14\x89E\xd3\xfb\xa1Z<\xb6\x82\xb1\x00\x13\xf5\xc5\xd5\x02\xebqK)\xa6\x9f\x15\xdd\xb7\xc8\x16TZ \xc4P\x94\xbdF\x06\xffNtOGf\xcb\xda\'\x1bn\x13\x98\xa6b\x9b\xe9\xe7\xb4\xfe\xca\xc5\x10\xff)\\T\x01h\xcb\x04uC%\t\x7f\xc1\x1d?w;\xc8\x8a', 0x0, 0x128, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_timedreceive(r0, &(0x7f0000000040)=""/251, 0xfb, 0x835, &(0x7f0000000140)={0x77359400}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x73, &(0x7f00000003c0)) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = eventfd2(0x8001, 0x100001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x4, 0x2}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2022081}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="260128bd7000fedbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="08000300907710b623e638ee45eba73db498f7487658d481b197f169b29c2c19531fff8dd6ece87fa9f39d209a4a5a246949", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000002}, 0x40014) (async) socketpair(0x22, 0x80000, 0x3f, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ff2bdf250100000000000000014100000018001700000016000001007564703a65797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffa3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x5}, 0x20004001) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x4, 0x4, 0x7, 0x0, 0xb88], 0x5, 0x100800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r3, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000000)={0x9cdc, 0x1, 0x7fffffff, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000280)=[0x7bc, 0x6, 0x5, 0x0], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x4, 0x4, 0x7, 0x0, 0xb88], 0x5, 0x100800}) (async) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{}, {}]}) (async) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000200)={r3, 0x1}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r5, 0xc0106403, &(0x7f0000000000)={0x9cdc, 0x1, 0x7fffffff, 0x8}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000280)=[0x7bc, 0x6, 0x5, 0x0], 0x4, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) (async) 05:57:07 executing program 5: sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004894) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) fstat(r0, &(0x7f0000000000)) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4004894) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) fstat(r0, &(0x7f0000000000)) (async) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x7}}, 0x14}}, 0x0) 05:57:07 executing program 3: mq_open(&(0x7f0000000180)='\t}@A\x1a3%M\x1a\xd5\xd7\x9a\xfd{4\xf11W\xca\x17w\xcdr\x02\xcf\xad\"\x15\x18\xca\xfc\xea[\x1a\x03\xbf\x97\xe0\xbbj~\x80\xf8&\xd9;\x1c\x1296\xb1.\f\xba0\xb3\x9d\x8e3\x8d\x92\xb2\x03\x98*g\x8du\x14\x89E\xd3\xfb\xa1Z<\xb6\x82\xb1\x00\x13\xf5\xc5\xd5\x02\xebqK)\xa6\x9f\x15\xdd\xb7\xc8\x16TZ \xc4P\x94\xbdF\x06\xffNtOGf\xcb\xda\'\x1bn\x13\x98\xa6b\x9b\xe9\xe7\xb4\xfe\xca\xc5\x10\xff)\\T\x01h\xcb\x04uC%\t\x7f\xc1\x1d?w;\xc8\x8a', 0x0, 0x128, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_timedreceive(r0, &(0x7f0000000040)=""/251, 0xfb, 0x835, &(0x7f0000000140)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x74, &(0x7f00000003c0)) 05:57:07 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = eventfd2(0x8001, 0x100001) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x4, 0x2}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2022081}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="260128bd7000fedbdf251600000008000300", @ANYRES32=r4, @ANYBLOB="08000300907710b623e638ee45eba73db498f7487658d481b197f169b29c2c19531fff8dd6ece87fa9f39d209a4a5a246949", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000002}, 0x40014) (async) socketpair(0x22, 0x80000, 0x3f, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ff2bdf250100000000000000014100000018001700000016000001007564703a65797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0xc000) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xdc, r7, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffa3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x53}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x5}, 0x20004001) 05:57:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x810802, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000140)={0x84, 0x1, 0x1ff, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x8}}, 0x14}}, 0x0) 05:57:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (rerun: 64) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x810802, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000100)) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000140)={0x84, 0x1, 0x1ff, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:07 executing program 3: mq_open(&(0x7f0000000040)='\xd6\x18i\xa10}\f\xedO\xd1\x1e\xbb\x11\x9f\x84\xadu\xb7Na\x1a\x1b\xca\xc3\xe5\xfa.aX\v\x19\xb4u\xb2\xa5\xc9\xf6\xce\xaf\x8a\xf9\x00\x82\xa29\x06=\xb1\xe4\xab\xf6fY\xc9V\xf2\xd5\xc0\xf7I\xb8\xfaz\x99\"\x1e\xedY\xa2/>\xda\x17\x03F\x8c3\x88\xe0\x89\xb7\xa1\xd1Z\x8c\b\b\xd6\xdea4ec/\x1b\xa1\xd1\xce\xca\'\xa3nk\xdf\x06\xd6\x95V(\xf0|xR\x93I\xdd\xb8V\xd3\xea\xfc)g\xa1\xdfl\xdc\x12\x98\xa1)6\x97\xaeZ\x0f\x8cg\xe9\x7fj\xffb\xbfn\xda\x12\xd0h\xe3N\x11\xa0c\x0ft\xea\xa9\x80\x82i\x98\xa7\xb5}<\xb7>k.E{Z', 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x20, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xe}}, 0x14}}, 0x0) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x75, &(0x7f00000003c0)) 05:57:07 executing program 1: socketpair(0x21, 0x4, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x7f, 0x62240) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 05:57:07 executing program 3: mq_open(&(0x7f0000000040)='\xd6\x18i\xa10}\f\xedO\xd1\x1e\xbb\x11\x9f\x84\xadu\xb7Na\x1a\x1b\xca\xc3\xe5\xfa.aX\v\x19\xb4u\xb2\xa5\xc9\xf6\xce\xaf\x8a\xf9\x00\x82\xa29\x06=\xb1\xe4\xab\xf6fY\xc9V\xf2\xd5\xc0\xf7I\xb8\xfaz\x99\"\x1e\xedY\xa2/>\xda\x17\x03F\x8c3\x88\xe0\x89\xb7\xa1\xd1Z\x8c\b\b\xd6\xdea4ec/\x1b\xa1\xd1\xce\xca\'\xa3nk\xdf\x06\xd6\x95V(\xf0|xR\x93I\xdd\xb8V\xd3\xea\xfc)g\xa1\xdfl\xdc\x12\x98\xa1)6\x97\xaeZ\x0f\x8cg\xe9\x7fj\xffb\xbfn\xda\x12\xd0h\xe3N\x11\xa0c\x0ft\xea\xa9\x80\x82i\x98\xa7\xb5}<\xb7>k.E{Z', 0x0, 0x0, 0x0) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x20, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) mq_open(&(0x7f0000000040)='\xd6\x18i\xa10}\f\xedO\xd1\x1e\xbb\x11\x9f\x84\xadu\xb7Na\x1a\x1b\xca\xc3\xe5\xfa.aX\v\x19\xb4u\xb2\xa5\xc9\xf6\xce\xaf\x8a\xf9\x00\x82\xa29\x06=\xb1\xe4\xab\xf6fY\xc9V\xf2\xd5\xc0\xf7I\xb8\xfaz\x99\"\x1e\xedY\xa2/>\xda\x17\x03F\x8c3\x88\xe0\x89\xb7\xa1\xd1Z\x8c\b\b\xd6\xdea4ec/\x1b\xa1\xd1\xce\xca\'\xa3nk\xdf\x06\xd6\x95V(\xf0|xR\x93I\xdd\xb8V\xd3\xea\xfc)g\xa1\xdfl\xdc\x12\x98\xa1)6\x97\xaeZ\x0f\x8cg\xe9\x7fj\xffb\xbfn\xda\x12\xd0h\xe3N\x11\xa0c\x0ft\xea\xa9\x80\x82i\x98\xa7\xb5}<\xb7>k.E{Z', 0x0, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x20, 0x2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) (async) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) (async) 05:57:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xf}}, 0x14}}, 0x0) 05:57:07 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x810802, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000140)={0x84, 0x1, 0x1ff, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 05:57:07 executing program 0: socketpair(0x26, 0x5, 0x76, &(0x7f00000003c0)) 05:57:07 executing program 1: socketpair(0x21, 0x4, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x7f, 0x62240) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 05:57:07 executing program 3: mq_open(&(0x7f0000000040)='\xd6\x18i\xa10}\f\xedO\xd1\x1e\xbb\x11\x9f\x84\xadu\xb7Na\x1a\x1b\xca\xc3\xe5\xfa.aX\v\x19\xb4u\xb2\xa5\xc9\xf6\xce\xaf\x8a\xf9\x00\x82\xa29\x06=\xb1\xe4\xab\xf6fY\xc9V\xf2\xd5\xc0\xf7I\xb8\xfaz\x99\"\x1e\xedY\xa2/>\xda\x17\x03F\x8c3\x88\xe0\x89\xb7\xa1\xd1Z\x8c\b\b\xd6\xdea4ec/\x1b\xa1\xd1\xce\xca\'\xa3nk\xdf\x06\xd6\x95V(\xf0|xR\x93I\xdd\xb8V\xd3\xea\xfc)g\xa1\xdfl\xdc\x12\x98\xa1)6\x97\xaeZ\x0f\x8cg\xe9\x7fj\xffb\xbfn\xda\x12\xd0h\xe3N\x11\xa0c\x0ft\xea\xa9\x80\x82i\x98\xa7\xb5}<\xb7>k.E{Z', 0x0, 0x0, 0x0) (async) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000100)=0x20, 0x2) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$tipc(r0, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) 05:57:07 executing program 5: write$midi(0xffffffffffffffff, &(0x7f00000000c0)="a75b0c5afd837ef1498ec11283731d4f5e16d9fa3973b96af4814b85dd75655ff105e6d5e92f43554dd0ebca8cc7ec9191789092216228c41780f9b939312cc1cb2f9b608c7b1ea01bad5bf633f5bc199a54647eb56e9a0818156a7723b50911dd5406862e2ca91dd25be4311c5a213f327fa27eb42fa94aa73d56aa54a13a63e96bb3dd53eaae78e593e627d9be8e5f8c", 0x91) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x60}}, 0x14}}, 0x0) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1000, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000000c0)) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x77, &(0x7f00000003c0)) 05:57:08 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mq_open(&(0x7f00000003c0)='[%@.#\x00', 0x80, 0x8, &(0x7f0000000400)={0x2, 0x0, 0xfffffffffffffffd, 0x3}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) mq_getsetattr(r0, &(0x7f00000001c0)={0x4, 0x5, 0x9, 0x1}, &(0x7f0000000200)) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48840) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:08 executing program 5: write$midi(0xffffffffffffffff, &(0x7f00000000c0)="a75b0c5afd837ef1498ec11283731d4f5e16d9fa3973b96af4814b85dd75655ff105e6d5e92f43554dd0ebca8cc7ec9191789092216228c41780f9b939312cc1cb2f9b608c7b1ea01bad5bf633f5bc199a54647eb56e9a0818156a7723b50911dd5406862e2ca91dd25be4311c5a213f327fa27eb42fa94aa73d56aa54a13a63e96bb3dd53eaae78e593e627d9be8e5f8c", 0x91) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 1: socketpair(0x21, 0x4, 0x3f, &(0x7f00000003c0)) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x7f, 0x62240) (rerun: 64) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xf0}}, 0x14}}, 0x0) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x78, &(0x7f00000003c0)) 05:57:08 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1000, 0x800, 0x2, 0xffff, 0xfffffe00, 0x80000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:08 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mq_open(&(0x7f00000003c0)='[%@.#\x00', 0x80, 0x8, &(0x7f0000000400)={0x2, 0x0, 0xfffffffffffffffd, 0x3}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) mq_getsetattr(r0, &(0x7f00000001c0)={0x4, 0x5, 0x9, 0x1}, &(0x7f0000000200)) (async, rerun: 32) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48840) (async, rerun: 32) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:08 executing program 5: write$midi(0xffffffffffffffff, &(0x7f00000000c0)="a75b0c5afd837ef1498ec11283731d4f5e16d9fa3973b96af4814b85dd75655ff105e6d5e92f43554dd0ebca8cc7ec9191789092216228c41780f9b939312cc1cb2f9b608c7b1ea01bad5bf633f5bc199a54647eb56e9a0818156a7723b50911dd5406862e2ca91dd25be4311c5a213f327fa27eb42fa94aa73d56aa54a13a63e96bb3dd53eaae78e593e627d9be8e5f8c", 0x91) (async, rerun: 64) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x300}}, 0x14}}, 0x0) 05:57:08 executing program 1: socketpair(0x26, 0x2, 0x3f, &(0x7f00000003c0)) eventfd(0x0) socketpair(0x6, 0x800, 0xfff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x79, &(0x7f00000003c0)) 05:57:08 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1000, 0x800, 0x2, 0xffff, 0xfffffe00, 0x80000000}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) (rerun: 64) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x700}}, 0x14}}, 0x0) 05:57:08 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) mq_open(&(0x7f00000003c0)='[%@.#\x00', 0x80, 0x8, &(0x7f0000000400)={0x2, 0x0, 0xfffffffffffffffd, 0x3}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) mq_getsetattr(r0, &(0x7f00000001c0)={0x4, 0x5, 0x9, 0x1}, &(0x7f0000000200)) (async, rerun: 64) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48840) (async, rerun: 64) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:57:08 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 1: socketpair(0x26, 0x2, 0x3f, &(0x7f00000003c0)) eventfd(0x0) (async) socketpair(0x6, 0x800, 0xfff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) 05:57:08 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1000, 0x800, 0x2, 0xffff, 0xfffffe00, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x7a, &(0x7f00000003c0)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xe00}}, 0x14}}, 0x0) 05:57:08 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x7b, &(0x7f00000003c0)) 05:57:08 executing program 1: socketpair(0x26, 0x2, 0x3f, &(0x7f00000003c0)) eventfd(0x0) socketpair(0x6, 0x800, 0xfff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000040)=0x80) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) 05:57:08 executing program 5: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c091) mq_open(&(0x7f0000000300)='\xb05\xa4+\x8e*\xae\xc5\xa7\f\x11\a\xf1*e\xb5\x18\xeb3\xfc\x98+i\xbc[\xac\x9c\x80\xdc\xc70y\xe0\x16B`\xcb\a`S\xfa\x91grh_.\x90\xb7\xc4\xca\xa1-,\x9b(\x12\xc9:S;\x89\x00\xb4\xb8\xb1', 0x80, 0x1a6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xf00}}, 0x14}}, 0x0) 05:57:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x68f9, 0x6, 0x20000e03], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x100, 0x3, 0xfffffff9, 0x1000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000240)=[0x9, 0x9, 0xff, 0xa5, 0x1, 0x7], &(0x7f0000000280)=[0x6, 0x40, 0x4, 0x8, 0xeb]}) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x7c, &(0x7f00000003c0)) 05:57:08 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) socketpair(0x10, 0x6, 0x80, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @empty, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) getsockname$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4b72}}, 0x14}}, 0x0) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c091) (async, rerun: 32) mq_open(&(0x7f0000000300)='\xb05\xa4+\x8e*\xae\xc5\xa7\f\x11\a\xf1*e\xb5\x18\xeb3\xfc\x98+i\xbc[\xac\x9c\x80\xdc\xc70y\xe0\x16B`\xcb\a`S\xfa\x91grh_.\x90\xb7\xc4\xca\xa1-,\x9b(\x12\xc9:S;\x89\x00\xb4\xb8\xb1', 0x80, 0x1a6, 0x0) (async, rerun: 32) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:08 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socket$l2tp(0x2, 0x2, 0x73) socketpair(0x10, 0x6, 0x80, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @empty, 0x4}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) getsockname$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x7d, &(0x7f00000003c0)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x6000}}, 0x14}}, 0x0) 05:57:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x68f9, 0x6, 0x20000e03], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x100, 0x3, 0xfffffff9, 0x1000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000240)=[0x9, 0x9, 0xff, 0xa5, 0x1, 0x7], &(0x7f0000000280)=[0x6, 0x40, 0x4, 0x8, 0xeb]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x68f9, 0x6, 0x20000e03], 0x3, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x100, 0x3, 0xfffffff9, 0x1000], 0x4, 0x800}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000240)=[0x9, 0x9, 0xff, 0xa5, 0x1, 0x7], &(0x7f0000000280)=[0x6, 0x40, 0x4, 0x8, 0xeb]}) (async) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:08 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) (async) socketpair(0x10, 0x6, 0x80, &(0x7f0000000040)={0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000080)={0x2, 0x0, @empty, 0x4}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockname$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async, rerun: 64) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) (rerun: 64) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0x724b}}, 0x14}}, 0x0) 05:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c091) (async) mq_open(&(0x7f0000000300)='\xb05\xa4+\x8e*\xae\xc5\xa7\f\x11\a\xf1*e\xb5\x18\xeb3\xfc\x98+i\xbc[\xac\x9c\x80\xdc\xc70y\xe0\x16B`\xcb\a`S\xfa\x91grh_.\x90\xb7\xc4\xca\xa1-,\x9b(\x12\xc9:S;\x89\x00\xb4\xb8\xb1', 0x80, 0x1a6, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x68f9, 0x6, 0x20000e03], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x100, 0x3, 0xfffffff9, 0x1000], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f00000002c0)={0x5, 0x1, &(0x7f0000000200)=[0x3], &(0x7f0000000240)=[0x9, 0x9, 0xff, 0xa5, 0x1, 0x7], &(0x7f0000000280)=[0x6, 0x40, 0x4, 0x8, 0xeb]}) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x7e, &(0x7f00000003c0)) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x6, 0x2, 0x3], 0x3, 0x6, 0xa7, 0x2, 0x1, 0x8, 0xa3d6, {0x3, 0x3f, 0x6, 0xef0, 0x8, 0x6, 0x40, 0x1000, 0xfffd, 0x401, 0x5, 0xff, 0x0, 0x200, "90e95a46df561fede20c55a0bf427b6bf1e53e98cfc46155f310434627f56978"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4) 05:57:08 executing program 1: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) ptrace$pokeuser(0x6, r0, 0x3ff, 0x40) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xf000}}, 0x14}}, 0x0) 05:57:08 executing program 5: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x82, &(0x7f00000003c0)) 05:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250500000006001b004e230000"], 0x1c}}, 0x4040000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mq_open(&(0x7f0000000180)='\x00', 0x2, 0x9bf99a8e756bf467, &(0x7f00000001c0)={0x7, 0x7fffffff, 0x5d, 0x800}) mq_timedreceive(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f0000001200)) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140)=0x8, 0x4) 05:57:08 executing program 1: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) (async, rerun: 32) ptrace$pokeuser(0x6, r0, 0x3ff, 0x40) (async, rerun: 32) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:08 executing program 5: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x6, 0x2, 0x3], 0x3, 0x6, 0xa7, 0x2, 0x1, 0x8, 0xa3d6, {0x3, 0x3f, 0x6, 0xef0, 0x8, 0x6, 0x40, 0x1000, 0xfffd, 0x401, 0x5, 0xff, 0x0, 0x200, "90e95a46df561fede20c55a0bf427b6bf1e53e98cfc46155f310434627f56978"}}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 32) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1, 0x0, 0x0, {0x10, 0x0, 0xffff}}, 0x14}}, 0x0) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x83, &(0x7f00000003c0)) 05:57:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250500000006001b004e230000"], 0x1c}}, 0x4040000) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = mq_open(&(0x7f0000000180)='\x00', 0x2, 0x9bf99a8e756bf467, &(0x7f00000001c0)={0x7, 0x7fffffff, 0x5d, 0x800}) mq_timedreceive(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f0000001200)) (async) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140)=0x8, 0x4) 05:57:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0xf}}, 0x0) 05:57:08 executing program 5: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) 05:57:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x6, 0x2, 0x3], 0x3, 0x6, 0xa7, 0x2, 0x1, 0x8, 0xa3d6, {0x3, 0x3f, 0x6, 0xef0, 0x8, 0x6, 0x40, 0x1000, 0xfffd, 0x401, 0x5, 0xff, 0x0, 0x200, "90e95a46df561fede20c55a0bf427b6bf1e53e98cfc46155f310434627f56978"}}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000000)=[0x6, 0x2, 0x3], 0x3, 0x6, 0xa7, 0x2, 0x1, 0x8, 0xa3d6, {0x3, 0x3f, 0x6, 0xef0, 0x8, 0x6, 0x40, 0x1000, 0xfffd, 0x401, 0x5, 0xff, 0x0, 0x200, "90e95a46df561fede20c55a0bf427b6bf1e53e98cfc46155f310434627f56978"}}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000000c0)=0x4) (async) 05:57:08 executing program 0: socketpair(0x26, 0x5, 0x84, &(0x7f00000003c0)) 05:57:08 executing program 1: r0 = gettid() syz_open_procfs$namespace(r0, 0x0) (async) ptrace$pokeuser(0x6, r0, 0x3ff, 0x40) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8001, 0x10002}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80000000, "da889a3efd0266be036844ecdc068b2bbe9d4837b83fca2d67b602f6b5991f06"}) 05:57:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf250500000006001b004e230000"], 0x1c}}, 0x4040000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = mq_open(&(0x7f0000000180)='\x00', 0x2, 0x9bf99a8e756bf467, &(0x7f00000001c0)={0x7, 0x7fffffff, 0x5d, 0x800}) mq_timedreceive(r2, &(0x7f0000000200)=""/4096, 0x1000, 0x2, &(0x7f0000001200)) (async) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000140)=0x8, 0x4) 05:57:09 executing program 1: socketpair(0x25, 0x1, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local, 0x1}, 0x10) getpeername$l2tp(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0xc0}}, 0x0) 05:57:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000300)={r5, 0x5, 0x5, 0x51c4, 0x73e838c3, 0xb29a, 0x7cb, 0x5, 0x1, 0x5e07, 0x401, 0x80000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f0c57dc1e025b6476d7e96d3adc82b4c4edf79d850c586350bc15db9828aa5eff88557c4f593f8da940c7517ac4922b911b", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000380"], 0x18}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r7, @ANYBLOB="00012cbd7000fbdbdf25090000001a0005002000000014000380080001000200000008000500e0000001040002800800060000f8ffff54000180060001000200000008000b0073697000080008000000000014000300200100000000000000000000000000025100050000000000060002002f00000008000900630000000c000700040000002000000008000400050000000800060004000000080004004af40004340003800600040006000000140002006261746164765f736c6176655f3100001400060020010000000000000000000000000000000003800000038000000200776c616e3000000000000000000000000000010001000000000007004e20000000000600ff020000000000000000000000000001000004000700000000000500030900000000028000000d0000000000000008000400000000000d000100000000000500ffff0000"], 0xdc}, 0x1, 0x0, 0x0, 0x21}, 0x40004) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000200)={0x400, 0xa, &(0x7f0000000140)=[0x9, 0x0, 0x7, 0xffff, 0x3, 0x0, 0x5, 0x6, 0xad, 0x4], &(0x7f0000000180)=[0x3ff, 0x2, 0xff, 0x4, 0x50, 0xd1], &(0x7f00000001c0)=[0x3ff, 0x2, 0x100]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x85, &(0x7f00000003c0)) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8001, 0x10002}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80000000, "da889a3efd0266be036844ecdc068b2bbe9d4837b83fca2d67b602f6b5991f06"}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8001, 0x10002}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80000000, "da889a3efd0266be036844ecdc068b2bbe9d4837b83fca2d67b602f6b5991f06"}) (async) 05:57:09 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0xec0}}, 0x0) 05:57:09 executing program 1: socketpair(0x25, 0x1, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local, 0x1}, 0x10) (async) getpeername$l2tp(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x86, &(0x7f00000003c0)) 05:57:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000300)={r5, 0x5, 0x5, 0x51c4, 0x73e838c3, 0xb29a, 0x7cb, 0x5, 0x1, 0x5e07, 0x401, 0x80000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f0c57dc1e025b6476d7e96d3adc82b4c4edf79d850c586350bc15db9828aa5eff88557c4f593f8da940c7517ac4922b911b", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000380"], 0x18}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r7, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x21}, 0x40004) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000200)={0x400, 0xa, &(0x7f0000000140)=[0x9, 0x0, 0x7, 0xffff, 0x3, 0x0, 0x5, 0x6, 0xad, 0x4], &(0x7f0000000180)=[0x3ff, 0x2, 0xff, 0x4, 0x50, 0xd1], &(0x7f00000001c0)=[0x3ff, 0x2, 0x100]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000300)={r5, 0x5, 0x5, 0x51c4, 0x73e838c3, 0xb29a, 0x7cb, 0x5, 0x1, 0x5e07, 0x401, 0x80000000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f0c57dc1e025b6476d7e96d3adc82b4c4edf79d850c586350bc15db9828aa5eff88557c4f593f8da940c7517ac4922b911b", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000380"], 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r7, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x21}, 0x40004) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000200)={0x400, 0xa, &(0x7f0000000140)=[0x9, 0x0, 0x7, 0xffff, 0x3, 0x0, 0x5, 0x6, 0xad, 0x4], &(0x7f0000000180)=[0x3ff, 0x2, 0xff, 0x4, 0x50, 0xd1], &(0x7f00000001c0)=[0x3ff, 0x2, 0x100]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8001, 0x10002}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80000000, "da889a3efd0266be036844ecdc068b2bbe9d4837b83fca2d67b602f6b5991f06"}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x8001, 0x10002}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000000)={0x20, 0x0, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x80000000, "da889a3efd0266be036844ecdc068b2bbe9d4837b83fca2d67b602f6b5991f06"}) (async) 05:57:09 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:09 executing program 1: socketpair(0x25, 0x1, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @local, 0x1}, 0x10) (async) getpeername$l2tp(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x33fe0}}, 0x0) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x87, &(0x7f00000003c0)) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x80, 0xce7}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', ',\x00'}, 0x7) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x20000314}}, 0x0) 05:57:09 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000300)={r5, 0x5, 0x5, 0x51c4, 0x73e838c3, 0xb29a, 0x7cb, 0x5, 0x1, 0x5e07, 0x401, 0x80000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3f0c57dc1e025b6476d7e96d3adc82b4c4edf79d850c586350bc15db9828aa5eff88557c4f593f8da940c7517ac4922b911b", @ANYRES16=r7, @ANYBLOB="010000000000000000000a00000004000380"], 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r7, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x21}, 0x40004) (async, rerun: 32) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r8, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r8, 0xc02064a5, &(0x7f0000000200)={0x400, 0xa, &(0x7f0000000140)=[0x9, 0x0, 0x7, 0xffff, 0x3, 0x0, 0x5, 0x6, 0xad, 0x4], &(0x7f0000000180)=[0x3ff, 0x2, 0xff, 0x4, 0x50, 0xd1], &(0x7f00000001c0)=[0x3ff, 0x2, 0x100]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 64) 05:57:09 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0xb, 0x2, 0xfffffffa, &(0x7f0000000000)) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x88, &(0x7f00000003c0)) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x80, 0xce7}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', ',\x00'}, 0x7) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x80, 0xce7}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', ',\x00'}, 0x7) (async) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x7ffff000}}, 0x0) 05:57:09 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0xb, 0x2, 0xfffffffa, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socketpair(0xb, 0x2, 0xfffffffa, &(0x7f0000000000)) (async) 05:57:09 executing program 3: mq_open(&(0x7f0000000200)='\x00Q\xb9\xb8m\x9e\x1d\x9b\t\x00\x00\x00P', 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x84) mq_getsetattr(r0, &(0x7f0000000040)={0x7fff, 0x2, 0x4, 0x3f0}, &(0x7f0000000080)) mq_timedreceive(r0, &(0x7f0000000240)=""/162, 0xa2, 0x8ec3, &(0x7f00000001c0)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$isdn(0x22, 0x3, 0x24) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x89, &(0x7f00000003c0)) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0xfffffdef}}, 0x0) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x80, 0xce7}) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)={'exec ', ',\x00'}, 0x7) 05:57:09 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socketpair(0xb, 0x2, 0xfffffffa, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socketpair(0xb, 0x2, 0xfffffffa, &(0x7f0000000000)) (async) 05:57:09 executing program 3: mq_open(&(0x7f0000000200)='\x00Q\xb9\xb8m\x9e\x1d\x9b\t\x00\x00\x00P', 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x84) (async) mq_getsetattr(r0, &(0x7f0000000040)={0x7fff, 0x2, 0x4, 0x3f0}, &(0x7f0000000080)) (async) mq_timedreceive(r0, &(0x7f0000000240)=""/162, 0xa2, 0x8ec3, &(0x7f00000001c0)={0x77359400}) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) socket$isdn(0x22, 0x3, 0x24) 05:57:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="89ea0000663c7af47f3ee45116b8fdf7879c701d3bdcbc01251ba387dd9522c2b3f3fe7262343f35f2a640e16adf6657a65402592ec39f6e46b5b7ab78741608508aff721f936cf3c3bc674678736d6b834bb2a6b2f54e979728cc492c26538dd2f99930645bb25cf85fc7d0b3df90eb81cf2d6272ce428f8b4340a3bfb7c2157bf1f3fc69b13bef4a4069b2b54692c122ea148a94e9698c8273543216d7f4a1c1caf26a91c570140e68cf79096dcd6ddecb8f37dd7f71aeb424a1783ee3b2bb41cb5fb363f62d9e4c83f09ac5f7221c57d1841d0e25073875128a9f63acc2580000000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000040003805946760dcb066c26e1f5a265083f32ea92d3331c0551932730e5987c86aeeff50af3a58129cdffedbed9ee559bf277737be66dee1e02b3cc2c0a00e0a3bdbf3bc82fda63ab1d16b8ac2a56e8"], 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4040080) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048080) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40a001, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2970}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5a56a491b86612fc}, 0x4004040) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000280)=0x4, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0xf294, 0x4, 0x7, 0x3, 0x10, "67107bf55abb91377d780f2b0cae9ca04e325d"}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x2}, 0x0) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x8805) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x8a, &(0x7f00000003c0)) 05:57:09 executing program 1: socketpair(0xe, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x1ff, 0x4) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x40044) read$eventfd(r6, &(0x7f0000000300), 0x8) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000180)={r2, 0x7f, 0xbb9, r6}) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0xd1, &(0x7f0000000100)=0x2) 05:57:09 executing program 3: mq_open(&(0x7f0000000200)='\x00Q\xb9\xb8m\x9e\x1d\x9b\t\x00\x00\x00P', 0x0, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x84) (async) mq_getsetattr(r0, &(0x7f0000000040)={0x7fff, 0x2, 0x4, 0x3f0}, &(0x7f0000000080)) (async) mq_timedreceive(r0, &(0x7f0000000240)=""/162, 0xa2, 0x8ec3, &(0x7f00000001c0)={0x77359400}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$isdn(0x22, 0x3, 0x24) 05:57:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="89ea0000663c7af47f3ee45116b8fdf7879c701d3bdcbc01251ba387dd9522c2b3f3fe7262343f35f2a640e16adf6657a65402592ec39f6e46b5b7ab78741608508aff721f936cf3c3bc674678736d6b834bb2a6b2f54e979728cc492c26538dd2f99930645bb25cf85fc7d0b3df90eb81cf2d6272ce428f8b4340a3bfb7c2157bf1f3fc69b13bef4a4069b2b54692c122ea148a94e9698c8273543216d7f4a1c1caf26a91c570140e68cf79096dcd6ddecb8f37dd7f71aeb424a1783ee3b2bb41cb5fb363f62d9e4c83f09ac5f7221c57d1841d0e25073875128a9f63acc2580000000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000040003805946760dcb066c26e1f5a265083f32ea92d3331c0551932730e5987c86aeeff50af3a58129cdffedbed9ee559bf277737be66dee1e02b3cc2c0a00e0a3bdbf3bc82fda63ab1d16b8ac2a56e8"], 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4040080) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048080) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40a001, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2970}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5a56a491b86612fc}, 0x4004040) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) (async) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000280)=0x4, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0xf294, 0x4, 0x7, 0x3, 0x10, "67107bf55abb91377d780f2b0cae9ca04e325d"}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x8b, &(0x7f00000003c0)) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x8805) 05:57:09 executing program 1: socketpair(0xe, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x1ff, 0x4) (async) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x1, 0x4) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x40044) (async) read$eventfd(r6, &(0x7f0000000300), 0x8) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000180)={r2, 0x7f, 0xbb9, r6}) (async, rerun: 32) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0xd1, &(0x7f0000000100)=0x2) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x8}, 0x0) 05:57:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x8805) 05:57:09 executing program 0: socketpair(0x26, 0x5, 0x8c, &(0x7f00000003c0)) 05:57:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x10}, 0x0) 05:57:09 executing program 1: socketpair(0xe, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x1ff, 0x4) r3 = accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r6) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x48400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0x40044) (async) read$eventfd(r6, &(0x7f0000000300), 0x8) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000180)={r2, 0x7f, 0xbb9, r6}) (async) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00000000c0)=0xd1, &(0x7f0000000100)=0x2) 05:57:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="89ea0000663c7af47f3ee45116b8fdf7879c701d3bdcbc01251ba387dd9522c2b3f3fe7262343f35f2a640e16adf6657a65402592ec39f6e46b5b7ab78741608508aff721f936cf3c3bc674678736d6b834bb2a6b2f54e979728cc492c26538dd2f99930645bb25cf85fc7d0b3df90eb81cf2d6272ce428f8b4340a3bfb7c2157bf1f3fc69b13bef4a4069b2b54692c122ea148a94e9698c8273543216d7f4a1c1caf26a91c570140e68cf79096dcd6ddecb8f37dd7f71aeb424a1783ee3b2bb41cb5fb363f62d9e4c83f09ac5f7221c57d1841d0e25073875128a9f63acc2580000000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000a000000040003805946760dcb066c26e1f5a265083f32ea92d3331c0551932730e5987c86aeeff50af3a58129cdffedbed9ee559bf277737be66dee1e02b3cc2c0a00e0a3bdbf3bc82fda63ab1d16b8ac2a56e8"], 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x8}, 0x4040080) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20048080) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40a001, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2970}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5a56a491b86612fc}, 0x4004040) (async) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, 0x0, 0x0) (async) setsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000280)=0x4, 0x1) sendmsg$TIPC_CMD_SHOW_PORTS(r7, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) (async) ioctl$TCSETS(r6, 0x5402, &(0x7f00000000c0)={0xf294, 0x4, 0x7, 0x3, 0x10, "67107bf55abb91377d780f2b0cae9ca04e325d"}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) 05:57:09 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:09 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ec6e00000000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000000)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x300}, 0x0) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x8d, &(0x7f00000003c0)) 05:57:10 executing program 1: socketpair(0x25, 0xa, 0x3d, &(0x7f0000000000)) 05:57:10 executing program 3: mq_open(&(0x7f0000000040)='\x11\xa8\xf6\xfdR\x1d\x1f\x92K\xe0\xdf\xab/\x1e\xc3\xed`\x91\xbc~\xf3*\xe6Q\xbc\xbb\x03\xf6e\xb1H\xda\xc3\xb7B\xae\x82\xab\xc2\x80\xf0z&=\x8bA\x1f\x8c\xa4_~\x16\x1c5\x80\xd9\x1f\xb9\xd2i\x8b\xa7\xd3\xd4\xf0=(\x03\xb2\xa1\xf5D\x03(g\x13\ri\xd2\x92\xb0\x06\xb1\x8f\xcd\xaa\x05k\xd7\xe8\a\x1az\xe9_\xd4\x93\\\x9fE~i\x88\xc5\xc4\x86\xe7\x96\x98\xa1b\xd21\'\x81-]k\x9d\xacNK\x9b\xf0\xb0\xd8\x9f+', 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c080, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2a, 0x2}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0xffffff1f}, 0x0) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x8e, &(0x7f00000003c0)) 05:57:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ec6e00000000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ec6e00000000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000000)) (async) 05:57:10 executing program 1: socketpair(0x25, 0xa, 0x3d, &(0x7f0000000000)) socketpair(0x25, 0xa, 0x3d, &(0x7f0000000000)) (async) 05:57:10 executing program 3: mq_open(&(0x7f0000000040)='\x11\xa8\xf6\xfdR\x1d\x1f\x92K\xe0\xdf\xab/\x1e\xc3\xed`\x91\xbc~\xf3*\xe6Q\xbc\xbb\x03\xf6e\xb1H\xda\xc3\xb7B\xae\x82\xab\xc2\x80\xf0z&=\x8bA\x1f\x8c\xa4_~\x16\x1c5\x80\xd9\x1f\xb9\xd2i\x8b\xa7\xd3\xd4\xf0=(\x03\xb2\xa1\xf5D\x03(g\x13\ri\xd2\x92\xb0\x06\xb1\x8f\xcd\xaa\x05k\xd7\xe8\a\x1az\xe9_\xd4\x93\\\x9fE~i\x88\xc5\xc4\x86\xe7\x96\x98\xa1b\xd21\'\x81-]k\x9d\xacNK\x9b\xf0\xb0\xd8\x9f+', 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c080, 0x0) (rerun: 64) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2a, 0x2}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x8f, &(0x7f00000003c0)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x2}, 0x0) 05:57:10 executing program 1: socketpair(0x25, 0xa, 0x3d, &(0x7f0000000000)) 05:57:10 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan3\x00'}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ec6e00000000000000000c00000008000300", @ANYRES32=r5, @ANYBLOB="0800010000000000"], 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 32) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f0000000000)) 05:57:10 executing program 3: mq_open(&(0x7f0000000040)='\x11\xa8\xf6\xfdR\x1d\x1f\x92K\xe0\xdf\xab/\x1e\xc3\xed`\x91\xbc~\xf3*\xe6Q\xbc\xbb\x03\xf6e\xb1H\xda\xc3\xb7B\xae\x82\xab\xc2\x80\xf0z&=\x8bA\x1f\x8c\xa4_~\x16\x1c5\x80\xd9\x1f\xb9\xd2i\x8b\xa7\xd3\xd4\xf0=(\x03\xb2\xa1\xf5D\x03(g\x13\ri\xd2\x92\xb0\x06\xb1\x8f\xcd\xaa\x05k\xd7\xe8\a\x1az\xe9_\xd4\x93\\\x9fE~i\x88\xc5\xc4\x86\xe7\x96\x98\xa1b\xd21\'\x81-]k\x9d\xacNK\x9b\xf0\xb0\xd8\x9f+', 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x22c080, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x2a, 0x2}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x90, &(0x7f00000003c0)) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x3}, 0x0) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0xc0) 05:57:10 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x3, 0x7fff, 0x40, 0x9, 0x9, 0xf54}, &(0x7f0000000080)={0x800, 0x7fffffffffffffff, 0xfff, 0x6, 0x3f, 0x200, 0x0, 0x4}, &(0x7f00000000c0)={0x100000000, 0xfff, 0x1, 0x7, 0x7f, 0x5f1, 0xfffffffffffff000, 0x7fff}, &(0x7f0000000100)={0x77359400}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x91, &(0x7f00000003c0)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x4}, 0x0) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1ff, 0xa1, 0x96, 0x1ff, 0x80000000, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:10 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000040)={0x0, 0x3, 0x7fff, 0x40, 0x9, 0x9, 0xf54}, &(0x7f0000000080)={0x800, 0x7fffffffffffffff, 0xfff, 0x6, 0x3f, 0x200, 0x0, 0x4}, &(0x7f00000000c0)={0x100000000, 0xfff, 0x1, 0x7, 0x7f, 0x5f1, 0xfffffffffffff000, 0x7fff}, &(0x7f0000000100)={0x77359400}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0xc0) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x92, &(0x7f00000003c0)) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x1c}}, 0xc0) 05:57:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa020, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf9d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084084}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1ff, 0xa1, 0x96, 0x1ff, 0x80000000, 0x8}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:10 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000040)={0x0, 0x3, 0x7fff, 0x40, 0x9, 0x9, 0xf54}, &(0x7f0000000080)={0x800, 0x7fffffffffffffff, 0xfff, 0x6, 0x3f, 0x200, 0x0, 0x4}, &(0x7f00000000c0)={0x100000000, 0xfff, 0x1, 0x7, 0x7f, 0x5f1, 0xfffffffffffff000, 0x7fff}, &(0x7f0000000100)={0x77359400}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x7}, 0x0) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x93, &(0x7f00000003c0)) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3f, "73a47330d00a436e3a3f613a91ffe583eaa7eafaab5851f5eff8027787f655d198ee3674e52fcdd30e92360c11b5b1593ef99f8f88f771804a7342d9d260ab8af825f64bf0c60c350280ba926a8259deab3d3213aef492d1ba327756769c5d3ce0f8dccb91bde5b7c7bef1d48df2f336810ccde87c9475e1ea5d4f"}, 0x83, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x9, r2}) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x1ff, 0xa1, 0x96, 0x1ff, 0x80000000, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 64) 05:57:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa020, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf9d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084084}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa020, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf9d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084084}, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:10 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x94) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x8}, 0x0) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3f, "73a47330d00a436e3a3f613a91ffe583eaa7eafaab5851f5eff8027787f655d198ee3674e52fcdd30e92360c11b5b1593ef99f8f88f771804a7342d9d260ab8af825f64bf0c60c350280ba926a8259deab3d3213aef492d1ba327756769c5d3ce0f8dccb91bde5b7c7bef1d48df2f336810ccde87c9475e1ea5d4f"}, 0x83, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x9, r2}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3f, "73a47330d00a436e3a3f613a91ffe583eaa7eafaab5851f5eff8027787f655d198ee3674e52fcdd30e92360c11b5b1593ef99f8f88f771804a7342d9d260ab8af825f64bf0c60c350280ba926a8259deab3d3213aef492d1ba327756769c5d3ce0f8dccb91bde5b7c7bef1d48df2f336810ccde87c9475e1ea5d4f"}, 0x83, 0x0, 0x0, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x9, r2}) (async) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x94, &(0x7f00000003c0)) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3f, "73a47330d00a436e3a3f613a91ffe583eaa7eafaab5851f5eff8027787f655d198ee3674e52fcdd30e92360c11b5b1593ef99f8f88f771804a7342d9d260ab8af825f64bf0c60c350280ba926a8259deab3d3213aef492d1ba327756769c5d3ce0f8dccb91bde5b7c7bef1d48df2f336810ccde87c9475e1ea5d4f"}, 0x83, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x9, r2}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) sendto$isdn(r1, &(0x7f0000000000)={0x7, 0x3f, "73a47330d00a436e3a3f613a91ffe583eaa7eafaab5851f5eff8027787f655d198ee3674e52fcdd30e92360c11b5b1593ef99f8f88f771804a7342d9d260ab8af825f64bf0c60c350280ba926a8259deab3d3213aef492d1ba327756769c5d3ce0f8dccb91bde5b7c7bef1d48df2f336810ccde87c9475e1ea5d4f"}, 0x83, 0x0, 0x0, 0x0) (async) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0xfff, 0x0, 0x10000}) (async) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f0000000100)={0x9, r2}) (async) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="34e1ff009c0d", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf25010000000000000001410000001800170000001a000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x6, 0x0, 0x10001}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x75}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x94}, 0x1, 0x0, 0x0, 0x5f00d20b2ad08c1b}, 0x41) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xe}, 0x0) 05:57:10 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x94) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x95, &(0x7f00000003c0)) 05:57:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0xa020, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x100, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xcf9d}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x5}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20084084}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:10 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x6, 0x4a80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x10001, 0x7, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000002c0)={0xa5dd8ebfe2729883}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x80100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 05:57:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="34e1ff009c0d", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf25010000000000000001410000001800170000001a000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x6, 0x0, 0x10001}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x75}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x94}, 0x1, 0x0, 0x0, 0x5f00d20b2ad08c1b}, 0x41) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) 05:57:10 executing program 0: socketpair(0x26, 0x5, 0x96, &(0x7f00000003c0)) 05:57:10 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0x94) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf}, 0x0) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x97, &(0x7f00000003c0)) 05:57:11 executing program 5: r0 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r0, 0x0, r1, 0xee01, r2]) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="34e1ff009c0d", @ANYRES16=r1, @ANYBLOB="080025bd7000ffdbdf25010000000000000001410000001800170000001a000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x6, 0x0, 0x10001}) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) (rerun: 64) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x39}}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x75}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0x94}, 0x1, 0x0, 0x0, 0x5f00d20b2ad08c1b}, 0x41) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000200)) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (rerun: 32) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r4}) (rerun: 32) 05:57:11 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xab2, 0x7, 0xbc98, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:11 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x6, 0x4a80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x10001, 0x7, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000002c0)={0xa5dd8ebfe2729883}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x80100, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x60}, 0x0) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x98, &(0x7f00000003c0)) 05:57:11 executing program 5: r0 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) (async) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r0, 0x0, r1, 0xee01, r2]) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) 05:57:11 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xab2, 0x7, 0xbc98, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) (async, rerun: 64) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0}, 0x0) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) socket$l2tp(0x2, 0x2, 0x73) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x99, &(0x7f00000003c0)) 05:57:11 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x6, 0x4a80) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f0000000300)=[0x6, 0x10001, 0x7, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000040)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000002c0)={0xa5dd8ebfe2729883}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x80100, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000180)) 05:57:11 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0xab2, 0x7, 0xbc98, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r0}) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:11 executing program 5: r0 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, r0, 0x0, r1, 0xee01, r2]) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {}]}) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x300}, 0x0) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9a, &(0x7f00000003c0)) 05:57:11 executing program 1: socketpair(0x29, 0x800, 0x54b44de3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4007, 0x2, 0x9, 0x4}) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) sendto$l2tp(r2, &(0x7f0000001140)="f38ee97f069e08c74a6b38bdf7fac2488a28996695a36b6e5c655bd3602811220634cd099d", 0x25, 0x0, &(0x7f0000001180)={0x2, 0x0, @remote, 0x3}, 0x10) sendto$isdn(r0, &(0x7f00000000c0)={0x80, 0xef2, "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"}, 0x1008, 0x10, &(0x7f0000001100)={0x22, 0x20, 0x7, 0x5, 0x8}, 0x6) [ 1301.384373] ieee802154 phy0 wpan0: encryption failed: -22 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x801}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x700}, 0x0) 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9b, &(0x7f00000003c0)) 05:57:11 executing program 1: socketpair(0x29, 0x800, 0x54b44de3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4007, 0x2, 0x9, 0x4}) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) sendto$l2tp(r2, &(0x7f0000001140)="f38ee97f069e08c74a6b38bdf7fac2488a28996695a36b6e5c655bd3602811220634cd099d", 0x25, 0x0, &(0x7f0000001180)={0x2, 0x0, @remote, 0x3}, 0x10) (async, rerun: 64) sendto$isdn(r0, &(0x7f00000000c0)={0x80, 0xef2, "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"}, 0x1008, 0x10, &(0x7f0000001100)={0x22, 0x20, 0x7, 0x5, 0x8}, 0x6) (rerun: 64) 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x801}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x801}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) (async) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xe00}, 0x0) 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9c, &(0x7f00000003c0)) 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x801}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d36e00000000000000000c000000080003007a67cc2e6e0e95a3e829dafbace564f06ecdba872cbe3980ca8f2c36b09e6945cd4418d714d5467576dd462bfbca57dcab45e15d635e5a5762ea99fc06d6abef1bf9ed01291b232b81e744e439d1bffeb339f6da14475a4a061e384e081c9ee1bceaca2a1b32643731788a4c0756ad2f143b83abce2a5bb6058dc16167fd53550cb967c9aaa1589fe972ae466dd51d", @ANYBLOB='\b'], 0x24}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:11 executing program 1: socketpair(0x29, 0x800, 0x54b44de3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) (async) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x4007, 0x2, 0x9, 0x4}) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) sendto$l2tp(r2, &(0x7f0000001140)="f38ee97f069e08c74a6b38bdf7fac2488a28996695a36b6e5c655bd3602811220634cd099d", 0x25, 0x0, &(0x7f0000001180)={0x2, 0x0, @remote, 0x3}, 0x10) (async) sendto$isdn(r0, &(0x7f00000000c0)={0x80, 0xef2, "dfccb28855cc2866c76d8d4f799bcb664e8d36636bd40e8d685963793c08e7562305a761118a36ad1d68488f41713c19238c02d34bd86f5e9058dd7565a8af41dcfac227080e5f2d07d6462e2e9efa8e7ac7e8fa8d08f9be9291f656f6c1f52af150bba7c85da1fa93beeb47f56454a64b60e74e62f9311e43a71110ac2e1a8dffd0e446afc1f610074ecf14dd617e028a3391ee9cb3eb4520c35001fba602296a5dee4acd149a908e4a8d68be380955853553425aec9b212f01a4f152733fefa27a54d7eb5c61eeb9912ea6a4201d5b1f414886cd3c61f951952284d9e2cc5f3ffb9e4cdff810c422aa087e1576552a86823d7c3c523bda5e7e1774a33345c9fb024c15bcf9ec8718f985b84b46b1bd4249d4ed55e3c15bc43cb9c547596790f4ffab6889ae39744a8ca8a1e66d98b3079511ce3f03c9589f73afb72af054cb6e0f71b7db13eded3d883d1741b9e64920350a5cab6e9e18b754829bc1d086b93bf33fa685c802ae76e4d595d4031e0389e2aaeb02065a95b48211b857a5dc0392cad74ef5fcfb8a1d41d2bc0bb8e4e79e916b9b4c38daf5ad6fa69e8d15f8ad79dcad600ac29e86b901d62ba563c9584594b47b4c4371d834ffef5f106a250e7b36c60795dccdbf099ac37e146a8e33d2ec8fceb4d115563c378acdf9520659e76b1216f0003e638b3f1d9fa47898c30d9c4a7e63ef28f421d3575e95bdfa7e39a6f60342605cd7209ceb4cac0af8ce341cc6f3a6c92d601405188cb70dc2fe6e55acc33cb44d4ad6b466f4a9d2a9f6c346dae5d3a927a584315576ff8cca83642b7f194e1ca5d0aa705036b5132808650f6f01d2b4ec249e7ca3ac7cac0fc616d3be6028d4d5668644a4fc378c36d4477256ab7b93566b07da5d119ebc5a42093044bb7539b377fdfd12522994beff8f949e2326655a8be2fab73865bbf9c1e261b873a9ac65e2cbf49ed53c87a3737461d73b6803803118b058ccec9a8ebaa8003c7dd8ed3e04972046e4c46510706e63842901c7fb10671baa70ad2ff88d03b6323e8faae21da50b4b682e7854918d795aaec9db465e27dc401846a6a10221fce71893fe80b63fae3b15979e1280b38de850efdd818bd9c48d3dc0ebf99b4989f4b15007b7e6f143abbdadd568e23fb6dc79009ead9ee0f9383fd67631e8f26192badee46e4a4f8daf6bec54b75106a2a7bb6b8af7044fc2e4f36afadd240bb1252cfabe3b041d2335eef32d6a520feac01344e92f9aa33f0aeb559e1d2bd4f2dae059b408a1f7af7b447f366f61d71bff83bf3f9252eaadb43c427e5f2d0e004c7936145297141f12f8f14b051af7ecbd64e248c51d374e905fa6c341df66b4085c046bb1f715ed452dd00b9d179d52eb3f833383f386a8d89e89a068a33b46b17a25fc5118523ad7b6289217961e6f517e776a9f8f8d4baad97d2725ce6d3bda647068620060fe07e67c0ffee797d678335b04d7b5b52f0e4b7fbcad8eb67a957e2dbc9d8b269c43a2a74f1ecb87d957a883665ef41e7c10a50fb32e504d51cdcc7a3e0139defd99dcb86f393f853ce0f6aa06d98f1ea6eb4528e7d2f1f7fca5ea1bc76217a03a0f90fd62c91241d1a5cbf6281e500936b0ecfbb52cd8a8bbaefdc89134054e0a34b3bdfe94e172afd8ae8a81598dd24d257ad14ab9d48d57344d9f650f3cc23be369506b86c53c7e021e2e2238f114b7cc8ea501121bedb54de538b8af4b61db4ac7ecdd988851bd5f83f05ad6b9d173ffe3e92a4da748e10e617837aa81f098fb0232489ff737d969d8df808834130a723d722254f9f7d6e3fb2bdc4d6b842c21e661219a9a3044764267f1997bb0b8cbf4800acaa7e7d45350219a096ed5fb13d2b0902d1bf13ba3964528cd04a6d10cf1d1a0dc2282b917e752658403ff69e43f1d6444bbcaa70096a7c09c29151e16df8359715b3b6c5473f42abc183e59bc83e43b67867ee04d94c79d533bdc2e77cf7cf7fd129b3583f6d2ae0e0f93b5f35dc164976c8f8435ae9b752f15fe874a0a2aefe787420469b692f8cca91a82b812cf889bbf7635129fd8976a5effa72e4d642e8f927662abfddc6a26561449a5bfbc0f542105aec991cf6752538b6cc79f650a086d7b2c9eb938f8fcce684db87f1a598b24c24764cea00a8a952ea4d53d809275aef88352a0ec32189c5325036489773c4be6b53bc543f0f984b9148bc7aaa200014e38a17aad19e9af68f6e69bff1e2267f9d313d784a48d9017ae999d7219336962a3b6c9939641203f7e883484e936fb91d3388f51f2f4124fa94361674332b1f7a40b70ff0ac0fc271d0492ee82400931b4a0b078cbdf72484ca53b4091c91e00135e7b5165287ad720d11f1e9ac385ebf2dd065c31a22c8ba45b0310f0b5e5bd5c50b0ec9daf0d1397630279632e6cc323fa13bc6b88ea4f06c7e1faa17993bc1b1f2e673aae0a980e372cb02e40d0641b2da225fbba308cc536a175e8e8fcddb4ab9122046da15dbf20849dfaeb7a1c53da293a9285cf1c8ec889c9d32d187bf6950433af474cd0110e25a90757b22dfba181c225232c5320b4a8669b922a01339a737df33b5b6003db78a5432b52bfadbc91d584d2bb2368dacfc54cc56a4808348c0e2e257e2912b0cbe512116a42cb7b964a1bca552ab2bbfa57d8e22ed275cf636b9e5d783e7090a48301dd63f66de77362988571b5f212859db92928dd8504c24b8239b56d5b1f56cb6eacbb5aa4aaa3a31e6acf4be311a2bffbbd453e03da306be134a19670e4786755ac808dbef3f87089c6c42c2977e75bebbf6ad91896ef3e7984c6430b89ab1d6228f87309afe7cbbb768b3910deb323ae40dc06e7110050340b4ee68022f7050d5477811262470752196c28a8ca4a7384812e7f86096d22063ba051d5a197126592a34d8e966d9b9e0d46f3ff5f73533999cd14d9f87eebe97b3876f9e070b8babd98d8cbc46adad046c6c727a34182aeb0a77e5e66f58ad1533b08dbe7f428517188b1add6d49698c45423fe50315e5ac009ed956c68c862b81e7a2e1645719424c8e30d3a13536523178cc9383b4784032b9b98e7958d4b48ee689b8e12a3bf2023fbf15c8966d912516407f9916fffd70f5e116e3e3ae53fa94ed318958cf6f64f1977922b2260f3834bdad24bbb9a07a324982ff2023185eee231bc66699cf5f01e79c90fba1eebcc13e947c93ce681280bd184014cf4354dab0a2ffc4ee6332ccfe3ed6e31f26197f3418333e8bbf212d4d1c24ee4b6602d048baa44aea1f145517a9ac6d9abf18ba619b69c398bf84ebe6dbdfea84aa8a6542b2b0fa1940afde9417b1d79a51a08fdac9a5558a1b79a4c845ce66e4771a486e8ab413c6d28cdfa5988a1870fa16fcad065b1c8556aed7e46b10a84dee595653224fa38b50dee048f162e8deb8e0b3f2ed77ce004be25fb7e80b8068fc1831b6842dd7e73d6c3d95829bc1a5f076b56426b535f6929692b307d6bb78c573c6414d3dea4806919dadaa7b859053a6a5b09ce706e6e25c9c4e8dafeca80d931f4db7f554d98fdfd100c0c918b87a33be1f4b75a1f93c4d376233c1491f4d35928323f1337e9a2dcccb6742820b6c48131bdadeff80c2b722fa913594f6694f707d7baeb88943b80d0c7ca33d7ab7a8d577b7306306d0cca5ee869d83f5e7135972fc4d3fe61836b586e5488b91ed5e2b632df4ebee27010e4fa42cb5185f400881fa3a063ac1838acaecc633888b3994c50321fc6be9ca85304c7aaa8c2aff2446b6877165bf9b87c15b44ca89224d994c5a67733d18221c7fc0e0118082304041f9f8f379d9c97f0c0e85b884c5689aabfa9c48b2e1a5421404db38e6d9b0f463e3793a4d0f1db16020514037ce17b3bb4453139658a57af47426f1a1223b598724f3f04923709d6fffb2e64ed9866fb2d17c6d951c49995f8a19addd3760bd76f065a1940b6c0c4d2aca2eea445376021c4af120ef801ed3af4ae0d5f6012554a5339e6ef5b44e9c2d536b943eae0d2d92375858f376019ffbacd655d9a5cbe14e1dca2255e2a4428f723f62b2b851edef901ba80898f3cdd6fa07def6c81ece62f2e34f10e3ff4d26974beb21ce7420b538c5b56bfed0a6ffdb01a99b5b725f694e0c1b703ed22eecba155994d560bfb07a1020faab72539145c9751387905bfd5470c3dcf6c63421a88a7321020b19e75f730ef37e81c4da657a3f9f1dc715600e532b4fb15aea9e1d4c32fdd65e0abefffe90ebe7022c80d89f3e91147ad5fae7ee646538fe7c576d05aa91d62e46fef2f44c2b8338856b701bd2571b3ce3d0a9539af149df1bfb5bcf9e43fcc4e42c265c443aae2f0423d642f45e0a94c3400682f7c28d3db94f24eb348c9bb1c23bac1a70bb81f2dc4c09fb69274debc512e710e838d486c2591455409997b51766e017066f8d44d803c8917ca8454b75df130ea5d5c5645b1058f5741709d3e99d6283a60643ee8072bb9da53aa23bffcf6db2096d68fb4d5a3d55c95260d3398fdc44ecd8262d68bc60bffc7cee485d0ce0603867a022679c2ce7a6c33eface40d932a7c4db466a50d6b0d9c339940553fd8a44928e497e8b1dfe057933d2ca376c7a3ce5d4f1a75548997732222d14823065ae2c63a86d615b61c18c3a50c53d7e14f69681a8cf5c78ed97eae228283ff26cde05aa9f371b23f4e13ae1c72780296c3540436de3e73432a95f4850b85d66736b51fc0e5f55741e010c11b5e926539cdbad4d71a1e030d60d7fd612e6b63be54df158e1e28f2248d4ff9700bd31808c2d31c23400ebf6f19cb1471ea57d088412626bda7fa232b2d5d02e5757b0c043fe35e49903a5f13efb753c5e892d2bc1795a54d00bd3ee5fcc4337cfce2727c6a57f6ef8f6fa20833f6f2e52115759feaacf8c78acdafbd362b4cecc37fd289868d16b7df961a3fbde7ee1fd5dc12428539bc4186d019cc1d298375a493e19a2f633733549599cb79950fb834c184377fa7bc7f3de517aa22e4c92e1dd8ea25150499eb739a33ac075491c864e19be31f1fd5cb5ca67d6fc1ea9e5fc1f77b301605c976f69ac855393fef2072735d354bbf69b3e0bf12367307fad431fa84bf75f4254189f27f4a2bf1576f7b0d104c80204abb9d90ef5eb67e3ae1d11d9aa7810c129de5d62ab04afe02c7ad166851b8d6710ee2f5cab954589762b4adbc95cbeb0917ffe55e53710e074e1975e43c8167b73add8388135cb87370e9a2537ac8d0b5d212c05df57871a3efcd2b538000f8a0631521b4f711cd72435b8f16e506e2814648c756c687bb7f044ab5afbde6e3e35c68e52672812d842db9ab044ca3e977a449b289f31fc84c42719b6f013105f3ec08f76af5609fa342503186d205010a920b04f11671f0c94fffecdfedac9007c0653568ae193b433dac7275c6606cd33c706a128a0bf583dfb400d01f7a3eea605ea77aa8accd7d1cc3e83a0104a80f84293448a9aa962acb1d5501dea13c2fab189ea89b62ee9664c252ef60b6e83bd6b0641fc8dc64a0bd65d0446888dcb5050e971678c3f91b7540b0ad2ca6bd0d4f4c5639f44f49dea3e78a15f24aebacee0c57273e63322966e07fafb1f7553fd159e190e9eb591aa2db4d61a859dd5ed4fb05e5ea4471e1afc2e53315541d1be071d591cdc2263e5d9a2c18570c2ca028406bf284248aa0f58056b9eea0452c7496c7f8152ad5f36dbf8c681ce248377762889785b852444924e417da5927f5835baa009eec5284c457c6d0707ffdc89460bac12742bedd8dced175667ac247e6"}, 0x1008, 0x10, &(0x7f0000001100)={0x22, 0x20, 0x7, 0x5, 0x8}, 0x6) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf00}, 0x0) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9d, &(0x7f00000003c0)) 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80800) syz_open_dev$dmmidi(&(0x7f0000000100), 0x20000000000, 0x200) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x40, 0x4) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x4b72}, 0x0) 05:57:11 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x3c, 0x1, 0x4, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x2}, &(0x7f00000000c0)={0x6, 0x6, 0x6, 0x3, 0x1, 0x78e, 0x7, 0xcb4}, &(0x7f0000000100)={0x7, 0xacfa, 0x9, 0x0, 0x6, 0x8, 0x6, 0x8}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socket$isdn(0x22, 0x3, 0x23) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d36e00000000000000000c000000080003007a67cc2e6e0e95a3e829dafbace564f06ecdba872cbe3980ca8f2c36b09e6945cd4418d714d5467576dd462bfbca57dcab45e15d635e5a5762ea99fc06d6abef1bf9ed01291b232b81e744e439d1bffeb339f6da14475a4a061e384e081c9ee1bceaca2a1b32643731788a4c0756ad2f143b83abce2a5bb6058dc16167fd53550cb967c9aaa1589fe972ae466dd51d", @ANYBLOB='\b'], 0x24}}, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) [ 1301.771936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2a6701) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80800) syz_open_dev$dmmidi(&(0x7f0000000100), 0x20000000000, 0x200) (async) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x40, 0x4) 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9e, &(0x7f00000003c0)) 05:57:11 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x3c, 0x1, 0x4, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x2}, &(0x7f00000000c0)={0x6, 0x6, 0x6, 0x3, 0x1, 0x78e, 0x7, 0xcb4}, &(0x7f0000000100)={0x7, 0xacfa, 0x9, 0x0, 0x6, 0x8, 0x6, 0x8}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socket$isdn(0x22, 0x3, 0x23) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x6000}, 0x0) 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2a6701) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2a6701) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:11 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80800) syz_open_dev$dmmidi(&(0x7f0000000100), 0x20000000000, 0x200) (async, rerun: 32) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x40, 0x4) (rerun: 32) [ 1301.919066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:57:11 executing program 0: socketpair(0x26, 0x5, 0x9f, &(0x7f00000003c0)) 05:57:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x724b}, 0x0) 05:57:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d36e00000000000000000c000000080003007a67cc2e6e0e95a3e829dafbace564f06ecdba872cbe3980ca8f2c36b09e6945cd4418d714d5467576dd462bfbca57dcab45e15d635e5a5762ea99fc06d6abef1bf9ed01291b232b81e744e439d1bffeb339f6da14475a4a061e384e081c9ee1bceaca2a1b32643731788a4c0756ad2f143b83abce2a5bb6058dc16167fd53550cb967c9aaa1589fe972ae466dd51d", @ANYBLOB='\b'], 0x24}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="d36e00000000000000000c000000080003007a67cc2e6e0e95a3e829dafbace564f06ecdba872cbe3980ca8f2c36b09e6945cd4418d714d5467576dd462bfbca57dcab45e15d635e5a5762ea99fc06d6abef1bf9ed01291b232b81e744e439d1bffeb339f6da14475a4a061e384e081c9ee1bceaca2a1b32643731788a4c0756ad2f143b83abce2a5bb6058dc16167fd53550cb967c9aaa1589fe972ae466dd51d", @ANYBLOB='\b'], 0x24}}, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x6, 0x7}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:11 executing program 1: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x3c, 0x1, 0x4, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x2}, &(0x7f00000000c0)={0x6, 0x6, 0x6, 0x3, 0x1, 0x78e, 0x7, 0xcb4}, &(0x7f0000000100)={0x7, 0xacfa, 0x9, 0x0, 0x6, 0x8, 0x6, 0x8}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) socket$isdn(0x22, 0x3, 0x23) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) clock_gettime(0x0, &(0x7f0000000140)) (async) pselect6(0x40, &(0x7f0000000080)={0x3c, 0x1, 0x4, 0x8, 0x0, 0x0, 0x7fffffffffffffff, 0x2}, &(0x7f00000000c0)={0x6, 0x6, 0x6, 0x3, 0x1, 0x78e, 0x7, 0xcb4}, &(0x7f0000000100)={0x7, 0xacfa, 0x9, 0x0, 0x6, 0x8, 0x6, 0x8}, &(0x7f0000000180)={r0, r1+10000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x1]}, 0x8}) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socket$isdn(0x22, 0x3, 0x23) (async) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) (async) 05:57:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2a6701) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:12 executing program 0: socketpair(0x26, 0x5, 0xa0, &(0x7f00000003c0)) 05:57:12 executing program 1: mq_open(&(0x7f0000000000)='\x00', 0x2, 0x16, &(0x7f0000000040)={0xb7, 0x2e5, 0x10001, 0xfffffffffffffff9}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf000}, 0x0) 05:57:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x401}) [ 1302.105946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:57:12 executing program 0: socketpair(0x26, 0x5, 0xa1, &(0x7f00000003c0)) 05:57:12 executing program 1: mq_open(&(0x7f0000000000)='\x00', 0x2, 0x16, &(0x7f0000000040)={0xb7, 0x2e5, 0x10001, 0xfffffffffffffff9}) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) [ 1302.170068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 05:57:12 executing program 3: mq_open(&(0x7f0000000000)='\xc2\x9d>\xb8\xa0\xba\x80\xe7\xf8\xfdI&\xe6\xfb[\xfd9\xb24#\xdf\t\x00\x95K\x0e\xe5C\xbb\b\xda\xec\xd9\xd8D?\x85\xc5\xbd\xae(\xe1\x9e\x9e\xd4\xad\a5\x9bI\xefnb:\xe8\\\xd1\xdf\xe8\x1b', 0x80, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x30000}, 0x0) 05:57:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xf695, 0x1f, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x2, 0x6], 0x3, 0x80800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x401}) 05:57:12 executing program 0: socketpair(0x26, 0x5, 0xa2, &(0x7f00000003c0)) 05:57:12 executing program 1: mq_open(&(0x7f0000000000)='\x00', 0x2, 0x16, &(0x7f0000000040)={0xb7, 0x2e5, 0x10001, 0xfffffffffffffff9}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) mq_open(&(0x7f0000000000)='\x00', 0x2, 0x16, &(0x7f0000000040)={0xb7, 0x2e5, 0x10001, 0xfffffffffffffff9}) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) 05:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffff}, 0x0) 05:57:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x401}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x4, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x401}) (async) 05:57:12 executing program 0: socketpair(0x26, 0x5, 0xa3, &(0x7f00000003c0)) 05:57:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x1000000}, 0x0) 05:57:12 executing program 3: mq_open(&(0x7f0000000000)='\xc2\x9d>\xb8\xa0\xba\x80\xe7\xf8\xfdI&\xe6\xfb[\xfd9\xb24#\xdf\t\x00\x95K\x0e\xe5C\xbb\b\xda\xec\xd9\xd8D?\x85\xc5\xbd\xae(\xe1\x9e\x9e\xd4\xad\a5\x9bI\xefnb:\xe8\\\xd1\xdf\xe8\x1b', 0x80, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 05:57:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xf695, 0x1f, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x2, 0x6], 0x3, 0x80800}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 64) 05:57:12 executing program 1: socketpair(0x26, 0x5, 0x1ff, &(0x7f00000003c0)) 05:57:12 executing program 0: socketpair(0x26, 0x5, 0xa4, &(0x7f00000003c0)) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x2000000}, 0x0) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x800}) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xa5, &(0x7f00000003c0)) 05:57:13 executing program 1: socketpair(0x26, 0x5, 0x1ff, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xf695, 0x1f, 0x5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x2, 0x6], 0x3, 0x80800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x3000000}, 0x0) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x800}) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x800}) (async) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xa6, &(0x7f00000003c0)) 05:57:13 executing program 3: mq_open(&(0x7f0000000000)='\xc2\x9d>\xb8\xa0\xba\x80\xe7\xf8\xfdI&\xe6\xfb[\xfd9\xb24#\xdf\t\x00\x95K\x0e\xe5C\xbb\b\xda\xec\xd9\xd8D?\x85\xc5\xbd\xae(\xe1\x9e\x9e\xd4\xad\a5\x9bI\xefnb:\xe8\\\xd1\xdf\xe8\x1b', 0x80, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mq_open(&(0x7f0000000000)='\xc2\x9d>\xb8\xa0\xba\x80\xe7\xf8\xfdI&\xe6\xfb[\xfd9\xb24#\xdf\t\x00\x95K\x0e\xe5C\xbb\b\xda\xec\xd9\xd8D?\x85\xc5\xbd\xae(\xe1\x9e\x9e\xd4\xad\a5\x9bI\xefnb:\xe8\\\xd1\xdf\xe8\x1b', 0x80, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) 05:57:13 executing program 1: socketpair(0x26, 0x5, 0x1ff, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xbaf8, 0x4], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="120697b139c6a58593dd234e7e17237ccc4233ae17", 0x15, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000240)={r4, 0x6d, &(0x7f00000001c0)=""/109}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x800}) syz_open_dev$dri(&(0x7f0000000080), 0xffffffffffffffff, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000140)={0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000000)={0x800}) (async) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xa7, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xbaf8, 0x4], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="120697b139c6a58593dd234e7e17237ccc4233ae17", 0x15, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000240)={r4, 0x6d, &(0x7f00000001c0)=""/109}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0xff, 0xd7], 0x2, 0xff, 0x0, 0x9, 0xb, 0x6, 0x5, {0x0, 0x4, 0xe07, 0x81, 0x4, 0x20, 0x20, 0x80, 0x5, 0x3f2, 0x20, 0x94cc, 0x3, 0x7, "bb9babce26f9cbc450d5768ab6c8ec293d0fb9ccd6917be7bd39d483789d80bf"}}) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x4000000}, 0x0) 05:57:13 executing program 1: socketpair(0x26, 0x5, 0xb2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xa8, &(0x7f00000003c0)) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x7000000}, 0x0) 05:57:13 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0xff, 0xd7], 0x2, 0xff, 0x0, 0x9, 0xb, 0x6, 0x5, {0x0, 0x4, 0xe07, 0x81, 0x4, 0x20, 0x20, 0x80, 0x5, 0x3f2, 0x20, 0x94cc, 0x3, 0x7, "bb9babce26f9cbc450d5768ab6c8ec293d0fb9ccd6917be7bd39d483789d80bf"}}) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xbaf8, 0x4], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000140)="120697b139c6a58593dd234e7e17237ccc4233ae17", 0x15, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000000240)={r4, 0x6d, &(0x7f00000001c0)=""/109}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x800, 0x1e18, 0x1], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x7fffffff, 0x47, 0x80010000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x4, 0x3f8e, 0x10001, 0x1a9, 0x3ff, 0x1}) socketpair(0x2, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1dad0001f87e1ef5dc9a765daca7aa3fb5f4010b046dadc5cd1a3b6f907f50faf3c549633babeddcf3600cd28c4b4bab7c07e3e2ae481af8c4a8923f807653d6cecbf64fa7dcad084addfe85d87a90f092e2e282480b9eef36d627d552e8b9ccfbc287c521bd11e5160e27197298305c7b739a3d77ad9e2361a276a2cbdd3d3037a5b743503aae2a", @ANYRES16=r6, @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x24004015) 05:57:13 executing program 1: socketpair(0x26, 0x5, 0xb2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair(0x26, 0x5, 0xb2, &(0x7f00000003c0)) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xa9, &(0x7f00000003c0)) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x8000000}, 0x0) 05:57:13 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0xff, 0xd7], 0x2, 0xff, 0x0, 0x9, 0xb, 0x6, 0x5, {0x0, 0x4, 0xe07, 0x81, 0x4, 0x20, 0x20, 0x80, 0x5, 0x3f2, 0x20, 0x94cc, 0x3, 0x7, "bb9babce26f9cbc450d5768ab6c8ec293d0fb9ccd6917be7bd39d483789d80bf"}}) 05:57:13 executing program 1: socketpair(0x26, 0x5, 0xb2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xaa, &(0x7f00000003c0)) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xe000000}, 0x0) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x800, 0x1e18, 0x1], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x7fffffff, 0x47, 0x80010000}) (async, rerun: 64) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 32) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x4, 0x3f8e, 0x10001, 0x1a9, 0x3ff, 0x1}) socketpair(0x2, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1dad0001f87e1ef5dc9a765daca7aa3fb5f4010b046dadc5cd1a3b6f907f50faf3c549633babeddcf3600cd28c4b4bab7c07e3e2ae481af8c4a8923f807653d6cecbf64fa7dcad084addfe85d87a90f092e2e282480b9eef36d627d552e8b9ccfbc287c521bd11e5160e27197298305c7b739a3d77ad9e2361a276a2cbdd3d3037a5b743503aae2a", @ANYRES16=r6, @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x24004015) 05:57:13 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:13 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008020}, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)=',\\$&:\xcc#\x00', 0x800, 0x123, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x9}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xab, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x9}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf000000}, 0x0) 05:57:13 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xac, &(0x7f00000003c0)) 05:57:13 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008020}, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)=',\\$&:\xcc#\x00', 0x800, 0x123, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x9}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008020}, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000040)=',\\$&:\xcc#\x00', 0x800, 0x123, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x9}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x2, 0x800, 0x1e18, 0x1], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x7fffffff, 0x47, 0x80010000}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async, rerun: 64) setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000000)={0x2, 0x4, 0x3f8e, 0x10001, 0x1a9, 0x3ff, 0x1}) socketpair(0x2, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="1dad0001f87e1ef5dc9a765daca7aa3fb5f4010b046dadc5cd1a3b6f907f50faf3c549633babeddcf3600cd28c4b4bab7c07e3e2ae481af8c4a8923f807653d6cecbf64fa7dcad084addfe85d87a90f092e2e282480b9eef36d627d552e8b9ccfbc287c521bd11e5160e27197298305c7b739a3d77ad9e2361a276a2cbdd3d3037a5b743503aae2a", @ANYRES16=r6, @ANYRESHEX=r1], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x24004015) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x60000000}, 0x0) 05:57:13 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x3, 0x4) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xad, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x9, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:13 executing program 3: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008020}, 0x1) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_open(&(0x7f0000000040)=',\\$&:\xcc#\x00', 0x800, 0x123, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x9}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4000000000}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x80}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x70}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008020}, 0x1) (async) socket$tipc(0x1e, 0x2, 0x0) (async) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000040)=',\\$&:\xcc#\x00', 0x800, 0x123, &(0x7f0000000080)={0x2, 0x8, 0x1, 0x9}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x724b0000}, 0x0) 05:57:13 executing program 0: socketpair(0x26, 0x5, 0xae, &(0x7f00000003c0)) 05:57:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:13 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)) 05:57:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x800) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x3, 0x3, 0xfff8, 0x40, 0x800, 0x7f, 0x69], &(0x7f0000000180)=[0x3]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:14 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x9effffff}, 0x0) 05:57:14 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xaf, &(0x7f00000003c0)) 05:57:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x800) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x3, 0x3, 0xfff8, 0x40, 0x800, 0x7f, 0x69], &(0x7f0000000180)=[0x3]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x800) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x3, 0x3, 0xfff8, 0x40, 0x800, 0x7f, 0x69], &(0x7f0000000180)=[0x3]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:14 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffffff}, 0x0) 05:57:14 executing program 1: socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)) socketpair(0x26, 0x6, 0x3f, &(0x7f00000003c0)) (async) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)={r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb0, &(0x7f00000003c0)) 05:57:14 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) (async) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfcffffff}, 0x0) 05:57:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x400, 0x800) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f00000001c0)={0x4, 0x1, &(0x7f00000000c0)=[0x7], &(0x7f0000000140)=[0x3, 0x3, 0xfff8, 0x40, 0x800, 0x7f, 0x69], &(0x7f0000000180)=[0x3]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x2047, 0x40010100}) 05:57:14 executing program 1: socketpair(0x29, 0x6, 0x40, &(0x7f00000003c0)) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb1, &(0x7f00000003c0)) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfffff000}, 0x0) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb2, &(0x7f00000003c0)) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x2047, 0x40010100}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x2047, 0x40010100}) (async) 05:57:14 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d5a01068", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf25010000000000000009410000004c00180000800062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4044005) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:14 executing program 1: socketpair(0x29, 0x6, 0x40, &(0x7f00000003c0)) 05:57:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffff7f}, 0x0) 05:57:14 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d5a01068", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf25010000000000000009410000004c00180000800062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4044005) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x2047, 0x40010100}) 05:57:14 executing program 1: socketpair(0x29, 0x6, 0x40, &(0x7f00000003c0)) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb3, &(0x7f00000003c0)) 05:57:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffff9e}, 0x0) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:14 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb4, &(0x7f00000003c0)) 05:57:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) 05:57:14 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d5a01068", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf25010000000000000009410000004c00180000800062726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4044005) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (rerun: 64) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfffffff0}, 0x0) 05:57:14 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb5, &(0x7f00000003c0)) 05:57:14 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfffffffc}, 0x0) 05:57:14 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2040009}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb6, &(0x7f00000003c0)) 05:57:14 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x3000000000000}, 0x0) 05:57:14 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:14 executing program 1: socketpair(0x5, 0x800, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast2}, &(0x7f0000000080)=0xc) syz_open_pts(0xffffffffffffffff, 0x4c20) 05:57:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) 05:57:14 executing program 0: socketpair(0x26, 0x5, 0xb7, &(0x7f00000003c0)) 05:57:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffffffffffff}, 0x0) 05:57:14 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r0}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:15 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) 05:57:15 executing program 1: socketpair(0x5, 0x800, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast2}, &(0x7f0000000080)=0xc) (async, rerun: 64) syz_open_pts(0xffffffffffffffff, 0x4c20) (rerun: 64) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xb8, &(0x7f00000003c0)) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x100000000000000}, 0x0) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 05:57:15 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) (async) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none, 0x1}, 0xa) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xb9, &(0x7f00000003c0)) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) (async) 05:57:15 executing program 1: socketpair(0x5, 0x800, 0x3f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast2}, &(0x7f0000000080)=0xc) (async) syz_open_pts(0xffffffffffffffff, 0x4c20) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x200000000000000}, 0x0) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1ff, 0x0, 0xffff}) 05:57:15 executing program 3: mq_open(&(0x7f0000000040)='\x15+`J{\x15\xb3h\x89KKg2\xe6\xa1\xf7\x94\xba\x14\xa2\xfd\xc7\x86\x9e\x00\xa2t\xf75\xa1\xdd\xcdw%\xb7\xef\xc22\x1e\x98\x81\xd1y\xb3Q%\x06O{a\xf2\xf6\x89i\x17E\xc3G\xb1UIUed\xaa\xa2\xd4Aa\x06\x1a[\xe3\x80\x84\x04\xfc\xa3:\xb4 \xb4\x84\x11[\xd7\x80\xa3vxs\x16n\x80\xb0]\xb3\xda\x83\x85\xfc\xacy\xd3#\xc6,\x8b\xc2q\xd0\x93\xd2G\x80B\xf1\xd9@\x10e\"\xb9s>\x14\x12\x03\t\x90', 0x40, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x20000014) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x300000000000000}, 0x0) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xba, &(0x7f00000003c0)) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101501) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1ff, 0x0, 0xffff}) 05:57:15 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x25) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x868c0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x9) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="985fa7d4ff8ffd17c67e3e99725940492b7a8f203d7d786cadabdbdde53bfd9fab03ed182b27481a8a9fc02def89e1e0d9bb7c2a5bb31271565aa1e70506529b9d9f0d0a7d60d523efc45eb78b654e076c790f75505f86d411eaf4b4cab8d03be21eb0934bd341739d8e23227a70c933d5d8c889edc641e48faf30b768e3579d3b2c48243c5726a489a6002cc1ec2c364ed4b7104ffd36da577ef7593a656e33dae31b0f31d374628e6c07dd16f51876eccdd4ed890dbee1e326cae784f5f61e", 0xc0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:15 executing program 3: mq_open(&(0x7f0000000040)='\x15+`J{\x15\xb3h\x89KKg2\xe6\xa1\xf7\x94\xba\x14\xa2\xfd\xc7\x86\x9e\x00\xa2t\xf75\xa1\xdd\xcdw%\xb7\xef\xc22\x1e\x98\x81\xd1y\xb3Q%\x06O{a\xf2\xf6\x89i\x17E\xc3G\xb1UIUed\xaa\xa2\xd4Aa\x06\x1a[\xe3\x80\x84\x04\xfc\xa3:\xb4 \xb4\x84\x11[\xd7\x80\xa3vxs\x16n\x80\xb0]\xb3\xda\x83\x85\xfc\xacy\xd3#\xc6,\x8b\xc2q\xd0\x93\xd2G\x80B\xf1\xd9@\x10e\"\xb9s>\x14\x12\x03\t\x90', 0x40, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x20000014) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x400000000000000}, 0x0) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x101501) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x1ff, 0x0, 0xffff}) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xbb, &(0x7f00000003c0)) 05:57:15 executing program 3: mq_open(&(0x7f0000000040)='\x15+`J{\x15\xb3h\x89KKg2\xe6\xa1\xf7\x94\xba\x14\xa2\xfd\xc7\x86\x9e\x00\xa2t\xf75\xa1\xdd\xcdw%\xb7\xef\xc22\x1e\x98\x81\xd1y\xb3Q%\x06O{a\xf2\xf6\x89i\x17E\xc3G\xb1UIUed\xaa\xa2\xd4Aa\x06\x1a[\xe3\x80\x84\x04\xfc\xa3:\xb4 \xb4\x84\x11[\xd7\x80\xa3vxs\x16n\x80\xb0]\xb3\xda\x83\x85\xfc\xacy\xd3#\xc6,\x8b\xc2q\xd0\x93\xd2G\x80B\xf1\xd9@\x10e\"\xb9s>\x14\x12\x03\t\x90', 0x40, 0x0, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x20000014) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x700000000000000}, 0x0) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x8000000000000001}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x8}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x4}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="985fa7d4ff8ffd17c67e3e99725940492b7a8f203d7d786cadabdbdde53bfd9fab03ed182b27481a8a9fc02def89e1e0d9bb7c2a5bb31271565aa1e70506529b9d9f0d0a7d60d523efc45eb78b654e076c790f75505f86d411eaf4b4cab8d03be21eb0934bd341739d8e23227a70c933d5d8c889edc641e48faf30b768e3579d3b2c48243c5726a489a6002cc1ec2c364ed4b7104ffd36da577ef7593a656e33dae31b0f31d374628e6c07dd16f51876eccdd4ed890dbee1e326cae784f5f61e", 0xc0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:15 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x25) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x868c0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x9) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x800000000000000}, 0x0) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xbc, &(0x7f00000003c0)) 05:57:15 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) 05:57:15 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x25) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x868c0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x9) prctl$PR_CAPBSET_DROP(0x18, 0x25) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x868c0, 0x0) (async) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0x9) (async) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xe00000000000000}, 0x0) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x8000000000000001}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x8}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x4}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x8000000000000001}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x8}) (async) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x4}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="985fa7d4ff8ffd17c67e3e99725940492b7a8f203d7d786cadabdbdde53bfd9fab03ed182b27481a8a9fc02def89e1e0d9bb7c2a5bb31271565aa1e70506529b9d9f0d0a7d60d523efc45eb78b654e076c790f75505f86d411eaf4b4cab8d03be21eb0934bd341739d8e23227a70c933d5d8c889edc641e48faf30b768e3579d3b2c48243c5726a489a6002cc1ec2c364ed4b7104ffd36da577ef7593a656e33dae31b0f31d374628e6c07dd16f51876eccdd4ed890dbee1e326cae784f5f61e", 0xc0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000140)="985fa7d4ff8ffd17c67e3e99725940492b7a8f203d7d786cadabdbdde53bfd9fab03ed182b27481a8a9fc02def89e1e0d9bb7c2a5bb31271565aa1e70506529b9d9f0d0a7d60d523efc45eb78b654e076c790f75505f86d411eaf4b4cab8d03be21eb0934bd341739d8e23227a70c933d5d8c889edc641e48faf30b768e3579d3b2c48243c5726a489a6002cc1ec2c364ed4b7104ffd36da577ef7593a656e33dae31b0f31d374628e6c07dd16f51876eccdd4ed890dbee1e326cae784f5f61e", 0xc0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x1, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:15 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xbd, &(0x7f00000003c0)) 05:57:15 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x80) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008085) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf00000000000000}, 0x0) 05:57:15 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x8, 0x4) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x8000000000000001}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000140)={0x0, 0x8}) bind$l2tp(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2, 0x4}, 0x10) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xbe, &(0x7f00000003c0)) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x6000000000000000}, 0x0) 05:57:15 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x80) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008085) 05:57:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:15 executing program 0: socketpair(0x26, 0x5, 0xbf, &(0x7f00000003c0)) 05:57:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 05:57:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x724b000000000000}, 0x0) 05:57:15 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x80) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008085) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}}, 0x80) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40008085) (async) 05:57:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc0, &(0x7f00000003c0)) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 05:57:16 executing program 3: mq_open(&(0x7f0000000100)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000300)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x800, 0x88, &(0x7f00000003c0)={0x6, 0x4, 0x8, 0x40}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0xb0, 0x7f, 0x0, 0xfffffffd, 0x401, 0x7, 0xff, 0x5, 0x8, 0x7, 0xfffffffd}) r0 = socket$isdn(0x22, 0x3, 0x3) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x1, 0xfffff094, 0x8001, 0x8, 0x5, 0x3ff, 0x8, 0x1ff, 0x6}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x9effffff00000000}, 0x0) 05:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1200000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc1, &(0x7f00000003c0)) 05:57:16 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x2, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:16 executing program 3: mq_open(&(0x7f0000000100)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000300)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x800, 0x88, &(0x7f00000003c0)={0x6, 0x4, 0x8, 0x40}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0xb0, 0x7f, 0x0, 0xfffffffd, 0x401, 0x7, 0xff, 0x5, 0x8, 0x7, 0xfffffffd}) r0 = socket$isdn(0x22, 0x3, 0x3) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x1, 0xfffff094, 0x8001, 0x8, 0x5, 0x3ff, 0x8, 0x1ff, 0x6}) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 05:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1200000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc2, &(0x7f00000003c0)) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:16 executing program 3: mq_open(&(0x7f0000000100)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x0, 0x0, 0x0) mq_open(&(0x7f0000000300)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x800, 0x88, &(0x7f00000003c0)={0x6, 0x4, 0x8, 0x40}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0xb0, 0x7f, 0x0, 0xfffffffd, 0x401, 0x7, 0xff, 0x5, 0x8, 0x7, 0xfffffffd}) r0 = socket$isdn(0x22, 0x3, 0x3) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x1, 0xfffff094, 0x8001, 0x8, 0x5, 0x3ff, 0x8, 0x1ff, 0x6}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mq_open(&(0x7f0000000100)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x0, 0x0, 0x0) (async) mq_open(&(0x7f0000000300)='-\xa0\xa5\xc0R\x1d\xe7=\xc4\x85\x83\xbd\xd3\x03\xf8\x14ln\x11\xc2V!\xf1\x92\x95\xe3#\x17\'\xd6,\\\xaa\x1e\xf4\x95-jL\a\x83\xbc\xc1+N9\x9c\x80\xe7\x91\xbb\xa1w\x91\x88\xcc\xaa\xc2^0\xa6\xc5\xb30\x9c>\xa6\x96\xe3y\xeb3x\xb2\'g\xf6\x9e\xee\xed\xef\xfb~\xc5<\x04\xe9\x19\x00\xa7\x8fC\xd7\xb8\xd3\xb37\x80\xe0u\x11^dB{O\xc2U\xc2\x18\xe01\xfb\x18\r\xf3\xc8\x95aY,H\xd9\x90\x0f/\xabg6\xcagyK^\xbd\xe6\x95\xc7m\xa8\xa4V\xc9pj\xd9C\xe0%\xd8\f\xc0\xb7\xc7\x99\x1aI\x9e\xd9>J\x91y\xd1\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6\x92\x0e\x87G\t\x9a5\x00V&49\xca\x91', 0x800, 0x88, &(0x7f00000003c0)={0x6, 0x4, 0x8, 0x40}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0xb0, 0x7f, 0x0, 0xfffffffd, 0x401, 0x7, 0xff, 0x5, 0x8, 0x7, 0xfffffffd}) (async) socket$isdn(0x22, 0x3, 0x3) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x1, 0xfffff094, 0x8001, 0x8, 0x5, 0x3ff, 0x8, 0x1ff, 0x6}) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000280)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 05:57:16 executing program 5: r0 = eventfd(0x5) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r1]) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc3, &(0x7f00000003c0)) 05:57:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1200000}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000011) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 05:57:16 executing program 5: r0 = eventfd(0x5) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r1]) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:16 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x9c, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000080)='{\x00', 0x40, 0x70, &(0x7f00000000c0)={0x1, 0x20000000000, 0x80, 0x5}) mq_getsetattr(r0, &(0x7f0000000100)={0xeb, 0xe860, 0x1, 0x8f}, 0x0) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc4, &(0x7f00000003c0)) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x5d, &(0x7f0000000000)) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0xc9, &(0x7f0000000140)=""/201}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:16 executing program 5: r0 = eventfd(0x5) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[r1]) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) eventfd(0x5) (async) fstat(r0, &(0x7f0000000100)) (async) getgroups(0x1, &(0x7f00000000c0)=[r1]) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:16 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x9c, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000080)='{\x00', 0x40, 0x70, &(0x7f00000000c0)={0x1, 0x20000000000, 0x80, 0x5}) mq_getsetattr(r0, &(0x7f0000000100)={0xeb, 0xe860, 0x1, 0x8f}, 0x0) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x9c, 0x8) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) mq_open(&(0x7f0000000080)='{\x00', 0x40, 0x70, &(0x7f00000000c0)={0x1, 0x20000000000, 0x80, 0x5}) (async) mq_getsetattr(r0, &(0x7f0000000100)={0xeb, 0xe860, 0x1, 0x8f}, 0x0) (async) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc5, &(0x7f00000003c0)) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x5d, &(0x7f0000000000)) socketpair(0x26, 0x5, 0x5d, &(0x7f0000000000)) (async) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0xc9, &(0x7f0000000140)=""/201}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:16 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x9c, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = mq_open(&(0x7f0000000080)='{\x00', 0x40, 0x70, &(0x7f00000000c0)={0x1, 0x20000000000, 0x80, 0x5}) mq_getsetattr(r0, &(0x7f0000000100)={0xeb, 0xe860, 0x1, 0x8f}, 0x0) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) write$eventfd(0xffffffffffffffff, &(0x7f0000000040)=0x9c, 0x8) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) mq_open(&(0x7f0000000080)='{\x00', 0x40, 0x70, &(0x7f00000000c0)={0x1, 0x20000000000, 0x80, 0x5}) (async) mq_getsetattr(r0, &(0x7f0000000100)={0xeb, 0xe860, 0x1, 0x8f}, 0x0) (async) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x5d, &(0x7f0000000000)) 05:57:16 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x49, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="e0b975566d38b9a20641e8d98039d8c3b29513c8a8e689839c553ae9c03341c798d93534f69e5d9a9c60a7b07ec77b5326d6758c0a1a49d5d6fe5cb5f21437c8290a3cb1ff3e516db85513939c5fa932ca999c8c3b315a9bed4bf1f9282cfacc339e26b2db129710e97e801589ab9c8696d673f2196604e29aa533f39db09c9d9376c63c156cc12ee1afd9df55d90b8fcd03c2067785aad9aa69a4d5e142abb07b4a", 0xa2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r0}) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc6, &(0x7f00000003c0)) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0xc9, &(0x7f0000000140)=""/201}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0xc9, &(0x7f0000000140)=""/201}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000240)=0x6, 0x4) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:16 executing program 0: socketpair(0x26, 0x5, 0xc7, &(0x7f00000003c0)) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r2, 0x37bfe17cca246ed3, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x80) 05:57:16 executing program 3: mq_open(&(0x7f0000000040)='h\xd9\xe1\xac\x90\x83\x83\x80 \xbc*\xc7\xaa6\xaf\x18a\x8e\x96O\xbf\x9f\xaeB\xaf\x00\xf0\v\xa3\xe4tY\xc3\x0f:\xbb5\x049R\x8d\xfe\x85\xe0P\xf0\xfdcza\x1c\x8fj^\x83\xcf\f\x06\vc\\7\x9cC(\xacG\xd27r\xb2\xba\xb8\x93\xd4\xd9S\x96\x9a*\x7f\xd3\xdf\xa3\t\xb2\xc0\x1f\xfcX$\xd2\xd0\xb0\xcd)\xef\xce8\xea\xe05\xe95D\xdf\x87yj\xf1\xdc\xed\a>Fw0A\x90E5\x01\x00\xf3&\xb1$\xc4\x81=\x03b}\xa1\xf3\xf1\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe0\xc0>!\x12*\x11\xcc\x11\xd0\x10\xb03\x99\x8eKd\xd2\x01\x9a&\xd1e\x8b\x127\xf0\x00\xaad\x02\x88\xd6\xde*\xf6\xbe?\x8fCG\x9a\xf6\xd7\x83A\xe3\x12\xce&\xdc\x86\x1b\xd0\xd3\xd1\x19;\x92\x1c\xf3\xee+\x18\x8b)\x11\xb1\x80,D\x9c\xee\f\r?V\xd8\x17\xa7\xf5\x9a\x8b\xe5\x0e\xc0M\xc7\xd5\xc9F\xf5\xc4\xe8u\x1dY\x99\xae\xdd6q\x97\xbe\xd5dAZ\x15l\xca\xbb\xc2FY\xca<0@8\xb98\x8d\xa2\xf1\x9c6\xd4\x1f\xb4\xc3\x7f\xe50x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x49, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="e0b975566d38b9a20641e8d98039d8c3b29513c8a8e689839c553ae9c03341c798d93534f69e5d9a9c60a7b07ec77b5326d6758c0a1a49d5d6fe5cb5f21437c8290a3cb1ff3e516db85513939c5fa932ca999c8c3b315a9bed4bf1f9282cfacc339e26b2db129710e97e801589ab9c8696d673f2196604e29aa533f39db09c9d9376c63c156cc12ee1afd9df55d90b8fcd03c2067785aad9aa69a4d5e142abb07b4a", 0xa2}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r0}) (async) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r2, 0x37bfe17cca246ed3, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x80) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) socketpair(0x1f, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:16 executing program 3: mq_open(&(0x7f0000000040)='h\xd9\xe1\xac\x90\x83\x83\x80 \xbc*\xc7\xaa6\xaf\x18a\x8e\x96O\xbf\x9f\xaeB\xaf\x00\xf0\v\xa3\xe4tY\xc3\x0f:\xbb5\x049R\x8d\xfe\x85\xe0P\xf0\xfdcza\x1c\x8fj^\x83\xcf\f\x06\vc\\7\x9cC(\xacG\xd27r\xb2\xba\xb8\x93\xd4\xd9S\x96\x9a*\x7f\xd3\xdf\xa3\t\xb2\xc0\x1f\xfcX$\xd2\xd0\xb0\xcd)\xef\xce8\xea\xe05\xe95D\xdf\x87yj\xf1\xdc\xed\a>Fw0A\x90E5\x01\x00\xf3&\xb1$\xc4\x81=\x03b}\xa1\xf3\xf1\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe0\xc0>!\x12*\x11\xcc\x11\xd0\x10\xb03\x99\x8eKd\xd2\x01\x9a&\xd1e\x8b\x127\xf0\x00\xaad\x02\x88\xd6\xde*\xf6\xbe?\x8fCG\x9a\xf6\xd7\x83A\xe3\x12\xce&\xdc\x86\x1b\xd0\xd3\xd1\x19;\x92\x1c\xf3\xee+\x18\x8b)\x11\xb1\x80,D\x9c\xee\f\r?V\xd8\x17\xa7\xf5\x9a\x8b\xe5\x0e\xc0M\xc7\xd5\xc9F\xf5\xc4\xe8u\x1dY\x99\xae\xdd6q\x97\xbe\xd5dAZ\x15l\xca\xbb\xc2FY\xca<0@8\xb98\x8d\xa2\xf1\x9c6\xd4\x1f\xb4\xc3\x7f\xe50x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x49, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)="e0b975566d38b9a20641e8d98039d8c3b29513c8a8e689839c553ae9c03341c798d93534f69e5d9a9c60a7b07ec77b5326d6758c0a1a49d5d6fe5cb5f21437c8290a3cb1ff3e516db85513939c5fa932ca999c8c3b315a9bed4bf1f9282cfacc339e26b2db129710e97e801589ab9c8696d673f2196604e29aa533f39db09c9d9376c63c156cc12ee1afd9df55d90b8fcd03c2067785aad9aa69a4d5e142abb07b4a", 0xa2}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000140)={r0}) (async) 05:57:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 05:57:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) socketpair(0x1f, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0x4) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:16 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = gettid() syz_open_procfs$namespace(r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000c80)={&(0x7f0000000b80), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r2, 0x37bfe17cca246ed3, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x80) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xc9, &(0x7f00000003c0)) 05:57:17 executing program 3: mq_open(&(0x7f0000000040)='h\xd9\xe1\xac\x90\x83\x83\x80 \xbc*\xc7\xaa6\xaf\x18a\x8e\x96O\xbf\x9f\xaeB\xaf\x00\xf0\v\xa3\xe4tY\xc3\x0f:\xbb5\x049R\x8d\xfe\x85\xe0P\xf0\xfdcza\x1c\x8fj^\x83\xcf\f\x06\vc\\7\x9cC(\xacG\xd27r\xb2\xba\xb8\x93\xd4\xd9S\x96\x9a*\x7f\xd3\xdf\xa3\t\xb2\xc0\x1f\xfcX$\xd2\xd0\xb0\xcd)\xef\xce8\xea\xe05\xe95D\xdf\x87yj\xf1\xdc\xed\a>Fw0A\x90E5\x01\x00\xf3&\xb1$\xc4\x81=\x03b}\xa1\xf3\xf1\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00S\xe0\xc0>!\x12*\x11\xcc\x11\xd0\x10\xb03\x99\x8eKd\xd2\x01\x9a&\xd1e\x8b\x127\xf0\x00\xaad\x02\x88\xd6\xde*\xf6\xbe?\x8fCG\x9a\xf6\xd7\x83A\xe3\x12\xce&\xdc\x86\x1b\xd0\xd3\xd1\x19;\x92\x1c\xf3\xee+\x18\x8b)\x11\xb1\x80,D\x9c\xee\f\r?V\xd8\x17\xa7\xf5\x9a\x8b\xe5\x0e\xc0M\xc7\xd5\xc9F\xf5\xc4\xe8u\x1dY\x99\xae\xdd6q\x97\xbe\xd5dAZ\x15l\xca\xbb\xc2FY\xca<0@8\xb98\x8d\xa2\xf1\x9c6\xd4\x1f\xb4\xc3\x7f\xe50x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) socketpair(0x1f, 0x80000, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000000c0)=0x4) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 3: mq_open(&(0x7f0000000100)='\x9c\x9f\xc9\xa3\x8d\x82?\xcc\xdfl\xff\x0f\x00\x00\x9e\xfeKz=\x01\x9aU\xfc+\xb8\xf2\x80\xca{[\x14\xbf+:8>/\x92*\xd6\xc6\x9b\x1d+K_\xe5\xda>}#\x06R\xfc\x9c\x97`\x9e\xa2\xdc\x19\xee\x00\x12\xa3\x87\xdbS2\xcc\aT\x16\xca\xcc\'\xf4%\xaa\xda,\x00\x10\x00\x00\x00\x00\x00\x00\xf2\xf7\xa2\b\xf43\x01\xfb\x96\x93\x1b\xc5m\xe1\x02\xdd\x18++\x8f\xd5\xbe\xb4G\x04\xbe#\x1e\xa8i\x9d\xa9\xb5\v\xb4F\x11\xaa\x9f8j\x82\xafOP\x0f\xc0\xffV\xf6\xc9\x83\x9aUB\xf1', 0x2, 0x30, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x3c}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b8b}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x2004c854) mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x3, 0x0, 0x8000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25010000000000000001410000001800170000001500000006696203000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 05:57:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400, 0x47, 0xfffc}) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xca, &(0x7f00000003c0)) 05:57:17 executing program 1: socketpair(0xb7dfea49078181b0, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x400, 0x47, 0xfffc}) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xcb, &(0x7f00000003c0)) 05:57:17 executing program 3: mq_open(&(0x7f0000000100)='\x9c\x9f\xc9\xa3\x8d\x82?\xcc\xdfl\xff\x0f\x00\x00\x9e\xfeKz=\x01\x9aU\xfc+\xb8\xf2\x80\xca{[\x14\xbf+:8>/\x92*\xd6\xc6\x9b\x1d+K_\xe5\xda>}#\x06R\xfc\x9c\x97`\x9e\xa2\xdc\x19\xee\x00\x12\xa3\x87\xdbS2\xcc\aT\x16\xca\xcc\'\xf4%\xaa\xda,\x00\x10\x00\x00\x00\x00\x00\x00\xf2\xf7\xa2\b\xf43\x01\xfb\x96\x93\x1b\xc5m\xe1\x02\xdd\x18++\x8f\xd5\xbe\xb4G\x04\xbe#\x1e\xa8i\x9d\xa9\xb5\v\xb4F\x11\xaa\x9f8j\x82\xafOP\x0f\xc0\xffV\xf6\xc9\x83\x9aUB\xf1', 0x2, 0x30, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x3c}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b8b}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x8014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x2004c854) mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x3, 0x0, 0x8000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25010000000000000001410000001800170000001500000006696203000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mq_open(&(0x7f0000000100)='\x9c\x9f\xc9\xa3\x8d\x82?\xcc\xdfl\xff\x0f\x00\x00\x9e\xfeKz=\x01\x9aU\xfc+\xb8\xf2\x80\xca{[\x14\xbf+:8>/\x92*\xd6\xc6\x9b\x1d+K_\xe5\xda>}#\x06R\xfc\x9c\x97`\x9e\xa2\xdc\x19\xee\x00\x12\xa3\x87\xdbS2\xcc\aT\x16\xca\xcc\'\xf4%\xaa\xda,\x00\x10\x00\x00\x00\x00\x00\x00\xf2\xf7\xa2\b\xf43\x01\xfb\x96\x93\x1b\xc5m\xe1\x02\xdd\x18++\x8f\xd5\xbe\xb4G\x04\xbe#\x1e\xa8i\x9d\xa9\xb5\v\xb4F\x11\xaa\x9f8j\x82\xafOP\x0f\xc0\xffV\xf6\xc9\x83\x9aUB\xf1', 0x2, 0x30, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x3c}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b8b}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x8014) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x2004c854) (async) mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x3, 0x0, 0x8000}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25010000000000000001410000001800170000001500000006696203000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) 05:57:17 executing program 1: socketpair(0xb7dfea49078181b0, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8001}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (rerun: 32) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 32) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xcc, &(0x7f00000003c0)) 05:57:17 executing program 3: mq_open(&(0x7f0000000100)='\x9c\x9f\xc9\xa3\x8d\x82?\xcc\xdfl\xff\x0f\x00\x00\x9e\xfeKz=\x01\x9aU\xfc+\xb8\xf2\x80\xca{[\x14\xbf+:8>/\x92*\xd6\xc6\x9b\x1d+K_\xe5\xda>}#\x06R\xfc\x9c\x97`\x9e\xa2\xdc\x19\xee\x00\x12\xa3\x87\xdbS2\xcc\aT\x16\xca\xcc\'\xf4%\xaa\xda,\x00\x10\x00\x00\x00\x00\x00\x00\xf2\xf7\xa2\b\xf43\x01\xfb\x96\x93\x1b\xc5m\xe1\x02\xdd\x18++\x8f\xd5\xbe\xb4G\x04\xbe#\x1e\xa8i\x9d\xa9\xb5\v\xb4F\x11\xaa\x9f8j\x82\xafOP\x0f\xc0\xffV\xf6\xc9\x83\x9aUB\xf1', 0x2, 0x30, 0x0) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async, rerun: 32) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x3c}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5b8b}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x8014) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048004}, 0x2004c854) (async) mq_getsetattr(r0, &(0x7f0000000440)={0x3, 0x3, 0x0, 0x8000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25010000000000000001410000001800170000001500000006696203000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 05:57:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) write$fb(r0, &(0x7f00000000c0)="151d88a291db8da6b17a2f5495dfec2fd2fa5e6abf3f5828223990e9cf84810a45a04c6642b9eb4c880782bc8db9c40d7c3d479b35b717f2dd31252222d428e930eb190c60a0a7110aacc36c4d225cc108824a6c27f01c95c35dda37234e19817bfadbd2981d31347b61458765c4a143001e05af215b4f4b3533829c058e44362c5db8", 0x83) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xfffe, 0x7ff, 0xfffe}) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xcd, &(0x7f00000003c0)) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x60}, 0x0) 05:57:17 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:17 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) 05:57:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) write$fb(r0, &(0x7f00000000c0)="151d88a291db8da6b17a2f5495dfec2fd2fa5e6abf3f5828223990e9cf84810a45a04c6642b9eb4c880782bc8db9c40d7c3d479b35b717f2dd31252222d428e930eb190c60a0a7110aacc36c4d225cc108824a6c27f01c95c35dda37234e19817bfadbd2981d31347b61458765c4a143001e05af215b4f4b3533829c058e44362c5db8", 0x83) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xfffe, 0x7ff, 0xfffe}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) write$fb(r0, &(0x7f00000000c0)="151d88a291db8da6b17a2f5495dfec2fd2fa5e6abf3f5828223990e9cf84810a45a04c6642b9eb4c880782bc8db9c40d7c3d479b35b717f2dd31252222d428e930eb190c60a0a7110aacc36c4d225cc108824a6c27f01c95c35dda37234e19817bfadbd2981d31347b61458765c4a143001e05af215b4f4b3533829c058e44362c5db8", 0x83) (async) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xfffe, 0x7ff, 0xfffe}) (async) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x80, 0x0, 0x20000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x80000000, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xce, &(0x7f00000003c0)) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x80, 0x0, 0x20000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x80000000, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async, rerun: 32) write$fb(r0, &(0x7f00000000c0)="151d88a291db8da6b17a2f5495dfec2fd2fa5e6abf3f5828223990e9cf84810a45a04c6642b9eb4c880782bc8db9c40d7c3d479b35b717f2dd31252222d428e930eb190c60a0a7110aacc36c4d225cc108824a6c27f01c95c35dda37234e19817bfadbd2981d31347b61458765c4a143001e05af215b4f4b3533829c058e44362c5db8", 0x83) (rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xfffe, 0x7ff, 0xfffe}) 05:57:17 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8c8a}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 05:57:17 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xcf, &(0x7f00000003c0)) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000000)={0x80, 0x0, 0x20000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x80000000, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xd0, &(0x7f00000003c0)) 05:57:17 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8c8a}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 05:57:17 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)) 05:57:17 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0), 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x105, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x63}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x408d0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x700}, 0x0) 05:57:17 executing program 0: socketpair(0x26, 0x5, 0xd1, &(0x7f00000003c0)) 05:57:17 executing program 3: mq_open(&(0x7f0000000140)='$-d\xd3g\x8f\xb0\xa8\x7f!3\a\xee\xb1tY?&fo\xd2\xab\x88\xe6F\xf6\x89\x80P\xd7\xe7 \x84\xb5_\x01l\x8c\xf2\x92\x1e!\xd2:\x9e[z\xac\n]\x1d\x96\xbcM\xe2\x98\x8d\x02\x16\x8c]\xf3\xec\xbe\x19\x06\x00\x00\xee\xffP\xb3$\xc3\xc9\xd4\xba\x82\xf4\xd1\xa6\xc6J\xc2;\x14\x17\xf7\xa0\x9b/\xe9\xcd\xebA\x838\x15v\x01\x94w\xad2\x06\x06\xb3\xf0\xfa\xb7\x16\rc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\x9bUJ]\xd3\xd0\xcd\v\xef\xb9&|XQ\a\x1e\x85\xe4F\xc9\xb1\xd2\xd1<\x9d\n\xcf\xb0@\xa7\'\xe5\xdc\xf8\xf1\xdd\xa3\xddV\n\b\xa6\xe6\xe46\xa1\xbe~F\xf5\xe3}\xb2\x1cAa\xe3\xd03`\x15\xd6M\xaa\x00\x00\xf9\xa0\\P>#\x02\xff\x84\xa9\xbaUV\xfc\xb7p_%\x8a\xca\a\xb8\xf7d\x8cK\xe1u\xb4f\x1c\xf5\x0f\x98\xe8|&\bh\x05P\xa8IFuQ', 0x0, 0x160, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x105, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x63}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x408d0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8c8a}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 05:57:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 05:57:18 executing program 3: mq_open(&(0x7f0000000140)='$-d\xd3g\x8f\xb0\xa8\x7f!3\a\xee\xb1tY?&fo\xd2\xab\x88\xe6F\xf6\x89\x80P\xd7\xe7 \x84\xb5_\x01l\x8c\xf2\x92\x1e!\xd2:\x9e[z\xac\n]\x1d\x96\xbcM\xe2\x98\x8d\x02\x16\x8c]\xf3\xec\xbe\x19\x06\x00\x00\xee\xffP\xb3$\xc3\xc9\xd4\xba\x82\xf4\xd1\xa6\xc6J\xc2;\x14\x17\xf7\xa0\x9b/\xe9\xcd\xebA\x838\x15v\x01\x94w\xad2\x06\x06\xb3\xf0\xfa\xb7\x16\rc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\x9bUJ]\xd3\xd0\xcd\v\xef\xb9&|XQ\a\x1e\x85\xe4F\xc9\xb1\xd2\xd1<\x9d\n\xcf\xb0@\xa7\'\xe5\xdc\xf8\xf1\xdd\xa3\xddV\n\b\xa6\xe6\xe46\xa1\xbe~F\xf5\xe3}\xb2\x1cAa\xe3\xd03`\x15\xd6M\xaa\x00\x00\xf9\xa0\\P>#\x02\xff\x84\xa9\xbaUV\xfc\xb7p_%\x8a\xca\a\xb8\xf7d\x8cK\xe1u\xb4f\x1c\xf5\x0f\x98\xe8|&\bh\x05P\xa8IFuQ', 0x0, 0x160, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd2, &(0x7f00000003c0)) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0x4, 0x6, 0x9, 0x2, 0xf2, 0x10001], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x5e, 0x4) 05:57:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0), 0x2) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x105, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x63}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x408d0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000000c0), 0x2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0), 0x2) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r3) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x105, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x63}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x408d0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd3, &(0x7f00000003c0)) 05:57:18 executing program 3: mq_open(&(0x7f0000000140)='$-d\xd3g\x8f\xb0\xa8\x7f!3\a\xee\xb1tY?&fo\xd2\xab\x88\xe6F\xf6\x89\x80P\xd7\xe7 \x84\xb5_\x01l\x8c\xf2\x92\x1e!\xd2:\x9e[z\xac\n]\x1d\x96\xbcM\xe2\x98\x8d\x02\x16\x8c]\xf3\xec\xbe\x19\x06\x00\x00\xee\xffP\xb3$\xc3\xc9\xd4\xba\x82\xf4\xd1\xa6\xc6J\xc2;\x14\x17\xf7\xa0\x9b/\xe9\xcd\xebA\x838\x15v\x01\x94w\xad2\x06\x06\xb3\xf0\xfa\xb7\x16\rc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00I\x9bUJ]\xd3\xd0\xcd\v\xef\xb9&|XQ\a\x1e\x85\xe4F\xc9\xb1\xd2\xd1<\x9d\n\xcf\xb0@\xa7\'\xe5\xdc\xf8\xf1\xdd\xa3\xddV\n\b\xa6\xe6\xe46\xa1\xbe~F\xf5\xe3}\xb2\x1cAa\xe3\xd03`\x15\xd6M\xaa\x00\x00\xf9\xa0\\P>#\x02\xff\x84\xa9\xbaUV\xfc\xb7p_%\x8a\xca\a\xb8\xf7d\x8cK\xe1u\xb4f\x1c\xf5\x0f\x98\xe8|&\bh\x05P\xa8IFuQ', 0x0, 0x160, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0x4, 0x6, 0x9, 0x2, 0xf2, 0x10001], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x5e, 0x4) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x4b72}, 0x0) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd4, &(0x7f00000003c0)) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:18 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xff, 0x4, 0x6, 0x9, 0x2, 0xf2, 0x10001], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x5e, 0x4) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd5, &(0x7f00000003c0)) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x800, 0x10000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev, @multicast1, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7379ff0000000000000000000000000023458c7b7048b82062f87b612de971231e2464608a5d32cf26cede302d217dfd59ddb66e01e45c5079f26909e9211b160b32839206e67b61223e822ed9e1843c3375eb7cc6ebc2b2e37061bee8", @ANYRES32=r2, @ANYBLOB="00800007000000000000fafd49210064006800003f0490787f000001ac1414bb4424c3230000000000000008ac1e000100000006ac1e0001000000026401010200000081891386ac14142cac1e0001e00000026401010183130b64010102ac1e0001ac141436640101000704b3fc0000"]}) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x724b}, 0x0) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd6, &(0x7f00000003c0)) 05:57:18 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x800, 0x10000) (async, rerun: 64) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev, @multicast1, 0x0}, &(0x7f0000000040)=0xc) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7379ff0000000000000000000000000023458c7b7048b82062f87b612de971231e2464608a5d32cf26cede302d217dfd59ddb66e01e45c5079f26909e9211b160b32839206e67b61223e822ed9e1843c3375eb7cc6ebc2b2e37061bee8", @ANYRES32=r2, @ANYBLOB="00800007000000000000fafd49210064006800003f0490787f000001ac1414bb4424c3230000000000000008ac1e000100000006ac1e0001000000026401010200000081891386ac14142cac1e0001e00000026401010183130b64010102ac1e0001ac141436640101000704b3fc0000"]}) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd7, &(0x7f00000003c0)) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf000}, 0x0) 05:57:18 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$inet(0x2, 0x800, 0x10000) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev, @multicast1, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7379ff0000000000000000000000000023458c7b7048b82062f87b612de971231e2464608a5d32cf26cede302d217dfd59ddb66e01e45c5079f26909e9211b160b32839206e67b61223e822ed9e1843c3375eb7cc6ebc2b2e37061bee8", @ANYRES32=r2, @ANYBLOB="00800007000000000000fafd49210064006800003f0490787f000001ac1414bb4424c3230000000000000008ac1e000100000006ac1e0001000000026401010200000081891386ac14142cac1e0001e00000026401010183130b64010102ac1e0001ac141436640101000704b3fc0000"]}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) socket$inet(0x2, 0x800, 0x10000) (async) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@initdev, @multicast1}, &(0x7f0000000040)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="7379ff0000000000000000000000000023458c7b7048b82062f87b612de971231e2464608a5d32cf26cede302d217dfd59ddb66e01e45c5079f26909e9211b160b32839206e67b61223e822ed9e1843c3375eb7cc6ebc2b2e37061bee8", @ANYRES32=r2, @ANYBLOB="00800007000000000000fafd49210064006800003f0490787f000001ac1414bb4424c3230000000000000008ac1e000100000006ac1e0001000000026401010200000081891386ac14142cac1e0001e00000026401010183130b64010102ac1e0001ac141436640101000704b3fc0000"]}) (async) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x0, 0x3ff, 0x2, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x44, 0x2, 0x9, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd8, &(0x7f00000003c0)) 05:57:18 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x30000}, 0x0) 05:57:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3ff4e15575b79205) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xd9, &(0x7f00000003c0)) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x0, 0x3ff, 0x2, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x44, 0x2, 0x9, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) (async, rerun: 64) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 64) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:18 executing program 3: mq_open(&(0x7f0000000540), 0x0, 0x0, 0x0) r0 = mq_open(&(0x7f0000000040)='+-+\x00', 0x40, 0x10, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x8}) mq_timedreceive(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x79, &(0x7f00000001c0)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x5, 0x101, 0x4, 0x7fff, 0x200}, &(0x7f0000000580)={0xffffffff, 0x7, 0x3, 0x3, 0xffff, 0x8000000000000001, 0x9c8288a, 0x5}, &(0x7f00000005c0)={0xffff, 0x9, 0x10001, 0x7ff, 0x32f3, 0x1, 0x8, 0x4}, &(0x7f0000000640)={r2, r3+10000000}, &(0x7f00000006c0)={&(0x7f0000000680), 0x8}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) mq_notify(r1, &(0x7f0000000300)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000200)="77238cda1b13f29defe1469fbc54c1847aeac5d835cddc1f920848c86301588bf887f1646771a9fe1e8add9bfdb7d6a61a65af68e1f8e6cf98a48112c7f094ac5902db98dcad887a9f666a115008b78abe30f519f047f75a5132afba5d65363d245c9f774826de6b3c10fc2b4de313b2e03821c6521ddb50d8ad0b8916c5b8dfbbf8be642b7abff256cb33e4ef7174386963d73eaa14d61318a06296f1c9", &(0x7f00000002c0)="bfcd884e487d04d61d7fbac7e0e3139900334c4cf61ff982aee642e230"}}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x141480, 0x0) mq_notify(r4, &(0x7f0000000500)={0x0, 0x1d, 0x1, @thr={&(0x7f00000003c0)="cb34d88f43e5d3fcfbd561c49a8aff2aeb9fa05d53c8d260643369633227eb959067e10162c7e7cdcdcf18eb1040a96bad23f80b39c967929636be0de10f41b317113c25db25e815b67e8a56d9b18d", &(0x7f0000000440)="ad7347014158928a1ebfcfe3ae504f23d193b7d8213ec218f26e165fc5c3f520758c22c0d446eb693ba49d5790a00774c40d9d8bdd654757e28c4c4f1cae8f6e55652cdf01ff3653db694ab7ceb33a042a71556b92568273afc120e335b3be362c7a304b410d6d1696c3c263457ccc751d34c6013877768ad2dcd2c21f96e228568d220a06449261840002a341021d39d15a8c9013d09c5bdc3b01d70f18"}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0) 05:57:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3ff4e15575b79205) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb8, 0x2, 0xb4}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000fedb3b250600000008000500030000004000018008000b007369700014000300ac141423000000000000000000000000080009004400000008000b007369700008211300050004000000070006006c6300000800060000000000080006008100000008000400ff01"], 0x74}, 0x1, 0x0, 0x0, 0xc8c1}, 0x20000005) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xda, &(0x7f00000003c0)) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 05:57:18 executing program 3: mq_open(&(0x7f0000000540), 0x0, 0x0, 0x0) (async, rerun: 32) r0 = mq_open(&(0x7f0000000040)='+-+\x00', 0x40, 0x10, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x8}) (rerun: 32) mq_timedreceive(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x79, &(0x7f00000001c0)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x5, 0x101, 0x4, 0x7fff, 0x200}, &(0x7f0000000580)={0xffffffff, 0x7, 0x3, 0x3, 0xffff, 0x8000000000000001, 0x9c8288a, 0x5}, &(0x7f00000005c0)={0xffff, 0x9, 0x10001, 0x7ff, 0x32f3, 0x1, 0x8, 0x4}, &(0x7f0000000640)={r2, r3+10000000}, &(0x7f00000006c0)={&(0x7f0000000680), 0x8}) (async, rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async, rerun: 32) mq_notify(r1, &(0x7f0000000300)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000200)="77238cda1b13f29defe1469fbc54c1847aeac5d835cddc1f920848c86301588bf887f1646771a9fe1e8add9bfdb7d6a61a65af68e1f8e6cf98a48112c7f094ac5902db98dcad887a9f666a115008b78abe30f519f047f75a5132afba5d65363d245c9f774826de6b3c10fc2b4de313b2e03821c6521ddb50d8ad0b8916c5b8dfbbf8be642b7abff256cb33e4ef7174386963d73eaa14d61318a06296f1c9", &(0x7f00000002c0)="bfcd884e487d04d61d7fbac7e0e3139900334c4cf61ff982aee642e230"}}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x141480, 0x0) mq_notify(r4, &(0x7f0000000500)={0x0, 0x1d, 0x1, @thr={&(0x7f00000003c0)="cb34d88f43e5d3fcfbd561c49a8aff2aeb9fa05d53c8d260643369633227eb959067e10162c7e7cdcdcf18eb1040a96bad23f80b39c967929636be0de10f41b317113c25db25e815b67e8a56d9b18d", &(0x7f0000000440)="ad7347014158928a1ebfcfe3ae504f23d193b7d8213ec218f26e165fc5c3f520758c22c0d446eb693ba49d5790a00774c40d9d8bdd654757e28c4c4f1cae8f6e55652cdf01ff3653db694ab7ceb33a042a71556b92568273afc120e335b3be362c7a304b410d6d1696c3c263457ccc751d34c6013877768ad2dcd2c21f96e228568d220a06449261840002a341021d39d15a8c9013d09c5bdc3b01d70f18"}}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) 05:57:18 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3ff4e15575b79205) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3ff4e15575b79205) (async) 05:57:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb8, 0x2, 0xb4}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 32) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) (rerun: 32) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000fedb3b250600000008000500030000004000018008000b007369700014000300ac141423000000000000000000000000080009004400000008000b007369700008211300050004000000070006006c6300000800060000000000080006008100000008000400ff01"], 0x74}, 0x1, 0x0, 0x0, 0xc8c1}, 0x20000005) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x0, 0x3ff, 0x2, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x44, 0x2, 0x9, 0x4], 0x5, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x0, 0x3ff, 0x2, 0x4], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0xff, 0x44, 0x2, 0x9, 0x4], 0x5, 0x800}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000140)={0x0, 0x1, r2}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:18 executing program 0: socketpair(0x26, 0x5, 0xdb, &(0x7f00000003c0)) 05:57:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 05:57:19 executing program 3: mq_open(&(0x7f0000000540), 0x0, 0x0, 0x0) (async) r0 = mq_open(&(0x7f0000000040)='+-+\x00', 0x40, 0x10, &(0x7f0000000080)={0x9, 0x2, 0x4, 0x8}) mq_timedreceive(r0, &(0x7f00000000c0)=""/210, 0xd2, 0x79, &(0x7f00000001c0)) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000540)={0x2, 0x2, 0x0, 0x5, 0x101, 0x4, 0x7fff, 0x200}, &(0x7f0000000580)={0xffffffff, 0x7, 0x3, 0x3, 0xffff, 0x8000000000000001, 0x9c8288a, 0x5}, &(0x7f00000005c0)={0xffff, 0x9, 0x10001, 0x7ff, 0x32f3, 0x1, 0x8, 0x4}, &(0x7f0000000640)={r2, r3+10000000}, &(0x7f00000006c0)={&(0x7f0000000680), 0x8}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) mq_notify(r1, &(0x7f0000000300)={0x0, 0x3e, 0x1, @thr={&(0x7f0000000200)="77238cda1b13f29defe1469fbc54c1847aeac5d835cddc1f920848c86301588bf887f1646771a9fe1e8add9bfdb7d6a61a65af68e1f8e6cf98a48112c7f094ac5902db98dcad887a9f666a115008b78abe30f519f047f75a5132afba5d65363d245c9f774826de6b3c10fc2b4de313b2e03821c6521ddb50d8ad0b8916c5b8dfbbf8be642b7abff256cb33e4ef7174386963d73eaa14d61318a06296f1c9", &(0x7f00000002c0)="bfcd884e487d04d61d7fbac7e0e3139900334c4cf61ff982aee642e230"}}) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x141480, 0x0) mq_notify(r4, &(0x7f0000000500)={0x0, 0x1d, 0x1, @thr={&(0x7f00000003c0)="cb34d88f43e5d3fcfbd561c49a8aff2aeb9fa05d53c8d260643369633227eb959067e10162c7e7cdcdcf18eb1040a96bad23f80b39c967929636be0de10f41b317113c25db25e815b67e8a56d9b18d", &(0x7f0000000440)="ad7347014158928a1ebfcfe3ae504f23d193b7d8213ec218f26e165fc5c3f520758c22c0d446eb693ba49d5790a00774c40d9d8bdd654757e28c4c4f1cae8f6e55652cdf01ff3653db694ab7ceb33a042a71556b92568273afc120e335b3be362c7a304b410d6d1696c3c263457ccc751d34c6013877768ad2dcd2c21f96e228568d220a06449261840002a341021d39d15a8c9013d09c5bdc3b01d70f18"}}) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xdc, &(0x7f00000003c0)) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x331240, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x202200, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c00000008000500000001000800050008000000080005007f0000003c00028006000b000a000000080008000700000006000e004e2400b702949294619d20295f13ef0008000500ff03000006000b000200000008000600596c22a86dedb8c6b8"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) read$fb(r5, &(0x7f0000000540)=""/232, 0xe8) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x2, 0x5, 0x7}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xb8, 0x2, 0xb4}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r3) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81084}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="08002cbd7000fedb3b250600000008000500030000004000018008000b007369700014000300ac141423000000000000000000000000080009004400000008000b007369700008211300050004000000070006006c6300000800060000000000080006008100000008000400ff01"], 0x74}, 0x1, 0x0, 0x0, 0xc8c1}, 0x20000005) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000023}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x1, 0x200, 0x1ff, 0x0, 0x5, 0x7c, 0x5, 0x2, 0x802a, 0x40, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x10000, 0x900, 0xffffff80, 0x5], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000400)={0x1, 0x8b, &(0x7f0000000300)=""/139}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x402000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3, 0x79, 0x1f, 0xfa, 0x0, 0x8, 0x4], 0x7, 0x800}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) r7 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x3, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000140)=0xffffff8f) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x331240, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x202200, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c00000008000500000001000800050008000000080005007f0000003c00028006000b000a000000080008000700000006000e004e2400b702949294619d20295f13ef0008000500ff03000006000b000200000008000600596c22a86dedb8c6b8"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) read$fb(r5, &(0x7f0000000540)=""/232, 0xe8) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000040)={0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x2, 0x5, 0x7}) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xdd, &(0x7f00000003c0)) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 05:57:19 executing program 3: mq_open(&(0x7f0000000100)='^\xbd\xa2-\x9fVx\xf8\xc2\x01Hy\xe2q\x98=\xdc\xf0\xb7#\x9a\xcd\xa1k>\x1bE\x02\xc6\xff\x02\xf7\x8d\xfe\xc0\xf5\xfa\f5\x01(B\xce\xc5\xfav\xa8\xda\x06\xf1\x11\x15\xef\xaf{\xcfm\xecx+\xfa|\x9a\xc2\x8f\xf6/m]\xc7\xba\xa4G\xaa\x02\x1f\xd9\xcb\t\x9f\x17{_\x92\xb5\xce]&#\x94\x11\xb7\x8b\x05\xa2\x84@\xceq\x94\xa6\xed\x7f/dvC\x8f8\xf8\x11\xa7\x1a\x18\x1f\xf8\xeeZ\x8e,\x18\xf2\'cl\vM\xd5\xf4\x85\xd3\xc0\xf9\xb8\xb5\xe6\xd1j\xa3\xe7U\x8d\x9d\x92\xa5', 0x40, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000023}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x1, 0x200, 0x1ff, 0x0, 0x5, 0x7c, 0x5, 0x2, 0x802a, 0x40, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x10000, 0x900, 0xffffff80, 0x5], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000400)={0x1, 0x8b, &(0x7f0000000300)=""/139}) (async) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x402000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3, 0x79, 0x1f, 0xfa, 0x0, 0x8, 0x4], 0x7, 0x800}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) r7 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x3, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000140)=0xffffff8f) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xde, &(0x7f00000003c0)) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x331240, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x202200, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c00000008000500000001000800050008000000080005007f0000003c00028006000b000a000000080008000700000006000e004e2400b702949294619d20295f13ef0008000500ff03000006000b000200000008000600596c22a86dedb8c6b8"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) read$fb(r5, &(0x7f0000000540)=""/232, 0xe8) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000201}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x100}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000040)={0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x2, 0x5, 0x7}) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000100)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000001c0)={0x2, 0xd7, 0x6, 0x80, 0x6, 0x8, 0xdc00}) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x7000000}, 0x0) 05:57:19 executing program 3: mq_open(&(0x7f0000000100)='^\xbd\xa2-\x9fVx\xf8\xc2\x01Hy\xe2q\x98=\xdc\xf0\xb7#\x9a\xcd\xa1k>\x1bE\x02\xc6\xff\x02\xf7\x8d\xfe\xc0\xf5\xfa\f5\x01(B\xce\xc5\xfav\xa8\xda\x06\xf1\x11\x15\xef\xaf{\xcfm\xecx+\xfa|\x9a\xc2\x8f\xf6/m]\xc7\xba\xa4G\xaa\x02\x1f\xd9\xcb\t\x9f\x17{_\x92\xb5\xce]&#\x94\x11\xb7\x8b\x05\xa2\x84@\xceq\x94\xa6\xed\x7f/dvC\x8f8\xf8\x11\xa7\x1a\x18\x1f\xf8\xeeZ\x8e,\x18\xf2\'cl\vM\xd5\xf4\x85\xd3\xc0\xf9\xb8\xb5\xe6\xd1j\xa3\xe7U\x8d\x9d\x92\xa5', 0x40, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4000000000000023}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x1, 0x200, 0x1ff, 0x0, 0x5, 0x7c, 0x5, 0x2, 0x802a, 0x40, 0x3}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x10000, 0x900, 0xffffff80, 0x5], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000240)={0x0, 0x80000, 0xffffffffffffffff}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r5, 0xc01064ac, &(0x7f0000000400)={0x1, 0x8b, &(0x7f0000000300)=""/139}) (async) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x402000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000440)=[0x3, 0x79, 0x1f, 0xfa, 0x0, 0x8, 0x4], 0x7, 0x800}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x0, r6}) (async) r7 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x3, 0x200000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000140)=0xffffff8f) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xdf, &(0x7f00000003c0)) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8000000}, 0x0) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfdc8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040844}, 0x8000) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000001c0)={0x2, 0xd7, 0x6, 0x80, 0x6, 0x8, 0xdc00}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000001c0)={0x2, 0xd7, 0x6, 0x80, 0x6, 0x8, 0xdc00}) (async) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xc0000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 05:57:19 executing program 3: mq_open(&(0x7f0000000100)='^\xbd\xa2-\x9fVx\xf8\xc2\x01Hy\xe2q\x98=\xdc\xf0\xb7#\x9a\xcd\xa1k>\x1bE\x02\xc6\xff\x02\xf7\x8d\xfe\xc0\xf5\xfa\f5\x01(B\xce\xc5\xfav\xa8\xda\x06\xf1\x11\x15\xef\xaf{\xcfm\xecx+\xfa|\x9a\xc2\x8f\xf6/m]\xc7\xba\xa4G\xaa\x02\x1f\xd9\xcb\t\x9f\x17{_\x92\xb5\xce]&#\x94\x11\xb7\x8b\x05\xa2\x84@\xceq\x94\xa6\xed\x7f/dvC\x8f8\xf8\x11\xa7\x1a\x18\x1f\xf8\xeeZ\x8e,\x18\xf2\'cl\vM\xd5\xf4\x85\xd3\xc0\xf9\xb8\xb5\xe6\xd1j\xa3\xe7U\x8d\x9d\x92\xa5', 0x40, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xe0, &(0x7f00000003c0)) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfdc8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040844}, 0x8000) (rerun: 64) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xc0000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xc0000) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) (async) 05:57:19 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000080)={0x1ff, 0x414c, 0x6, 0x1}, &(0x7f0000000180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edff", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250000000008000a000100000006000100070000000c000f0001f9960000000000050022000100000099a62137bfd52919de389603aea021bdea26b43e6c39ed7d01e67ee8eb18ab46f717b68066821364eec45fc070f868b5fec5ec424a2effaf41439521e292481dd19a1e668cb8d4af4eeefca724496c3e56c7b16319cae72a4d3e7553194f04417648c2"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f00000000c0)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000180)={0x3, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f00000001c0)={0x2, 0xd7, 0x6, 0x80, 0x6, 0x8, 0xdc00}) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xe1, &(0x7f00000003c0)) 05:57:19 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0xfdc8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040844}, 0x8000) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0xc0000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{}, {}, {}, {}]}) 05:57:19 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000080)={0x1ff, 0x414c, 0x6, 0x1}, &(0x7f0000000180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edff", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250000000008000a000100000006000100070000000c000f0001f9960000000000050022000100000099a62137bfd52919de389603aea021bdea26b43e6c39ed7d01e67ee8eb18ab46f717b68066821364eec45fc070f868b5fec5ec424a2effaf41439521e292481dd19a1e668cb8d4af4eeefca724496c3e56c7b16319cae72a4d3e7553194f04417648c2"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xe2, &(0x7f00000003c0)) 05:57:19 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @dev}, &(0x7f0000000040)=0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x80) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000003c0)=""/206, &(0x7f00000004c0)=0xce) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c9}, 0x40080) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x90}}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0xa72}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) read$fb(r6, &(0x7f0000000500)=""/175, 0xaf) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xe3, &(0x7f00000003c0)) 05:57:19 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000080)={0x1ff, 0x414c, 0x6, 0x1}, &(0x7f0000000180)) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edff", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250000000008000a000100000006000100070000000c000f0001f9960000000000050022000100000099a62137bfd52919de389603aea021bdea26b43e6c39ed7d01e67ee8eb18ab46f717b68066821364eec45fc070f868b5fec5ec424a2effaf41439521e292481dd19a1e668cb8d4af4eeefca724496c3e56c7b16319cae72a4d3e7553194f04417648c2"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_getsetattr(r0, &(0x7f0000000080)={0x1ff, 0x414c, 0x6, 0x1}, &(0x7f0000000180)) (async) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="edff", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250000000008000a000100000006000100070000000c000f0001f9960000000000050022000100000099a62137bfd52919de389603aea021bdea26b43e6c39ed7d01e67ee8eb18ab46f717b68066821364eec45fc070f868b5fec5ec424a2effaf41439521e292481dd19a1e668cb8d4af4eeefca724496c3e56c7b16319cae72a4d3e7553194f04417648c2"], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000840) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) (async) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x724b0000}, 0x0) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x212382) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x9, 0x4, 0x1, 0x1, 0x4, 0xfff, 0x8, 0x5, 0x7, 0x6, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000240)={0x2, 0x7, 0x1f, 0x2, 0x9, 0x3, 0x80}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x5, 0xeb, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) 05:57:19 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @dev}, &(0x7f0000000040)=0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x80) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000003c0)=""/206, &(0x7f00000004c0)=0xce) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c9}, 0x40080) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x90}}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0xa72}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) read$fb(r6, &(0x7f0000000500)=""/175, 0xaf) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @dev}, &(0x7f0000000040)=0xc) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x80) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000003c0)=""/206, &(0x7f00000004c0)=0xce) (async) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r0, 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c9}, 0x40080) (async) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x90}}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0xa72}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) read$fb(r6, &(0x7f0000000500)=""/175, 0xaf) (async) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 05:57:19 executing program 0: socketpair(0x26, 0x5, 0xe4, &(0x7f00000003c0)) 05:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 05:57:19 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x212382) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x9, 0x4, 0x1, 0x1, 0x4, 0xfff, 0x8, 0x5, 0x7, 0x6, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000240)={0x2, 0x7, 0x1f, 0x2, 0x9, 0x3, 0x80}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x5, 0xeb, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x212382) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x9, 0x4, 0x1, 0x1, 0x4, 0xfff, 0x8, 0x5, 0x7, 0x6, 0x10001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000240)={0x2, 0x7, 0x1f, 0x2, 0x9, 0x3, 0x80}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x5, 0xeb, 0x7}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) (async) 05:57:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) 05:57:19 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @dev}, &(0x7f0000000040)=0xc) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x80) r3 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000003c0)=""/206, &(0x7f00000004c0)=0xce) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r0, 0x1000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c9}, 0x40080) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x90}}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0xa72}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) read$fb(r6, &(0x7f0000000500)=""/175, 0xaf) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @empty, 0x2}, 0x10) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @dev}, &(0x7f0000000040)=0xc) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x7, 0x80) (async) socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000003c0)=""/206, &(0x7f00000004c0)=0xce) (async) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000a, 0x810, r0, 0x1000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c9}, 0x40080) (async) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x90, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x90}}, 0x8) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x0, 0xa72}) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f0000000180)) (async) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r6, 0x0, 0x0) (async) read$fb(r6, &(0x7f0000000500)=""/175, 0xaf) (async) 05:57:20 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000480)=""/205, 0xcd, 0x7f, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x121303, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000040)={0x3, 0x0, 0x5, 0xd3}, &(0x7f0000000180)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) mq_getsetattr(r3, &(0x7f0000000100)={0x2, 0x4, 0x3}, &(0x7f0000000140)) r4 = accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000001c0)=0x10, 0x80800) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x44bf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfb}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xe5, &(0x7f00000003c0)) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x212382) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x9, 0x4, 0x1, 0x1, 0x4, 0xfff, 0x8, 0x5, 0x7, 0x6, 0x10001}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000240)={0x2, 0x7, 0x1f, 0x2, 0x9, 0x3, 0x80}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x5, 0xeb, 0x7}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x212382) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x9, 0x4, 0x1, 0x1, 0x4, 0xfff, 0x8, 0x5, 0x7, 0x6, 0x10001}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000240)={0x2, 0x7, 0x1f, 0x2, 0x9, 0x3, 0x80}) (async) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) (async) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x5, 0xeb, 0x7}) (async) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x5}) (async) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xe6, &(0x7f00000003c0)) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 05:57:20 executing program 1: socketpair(0x10, 0x1, 0x3d, &(0x7f0000000000)) 05:57:20 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000480)=""/205, 0xcd, 0x7f, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x121303, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) mq_getsetattr(r2, &(0x7f0000000040)={0x3, 0x0, 0x5, 0xd3}, &(0x7f0000000180)) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) mq_getsetattr(r3, &(0x7f0000000100)={0x2, 0x4, 0x3}, &(0x7f0000000140)) (async) r4 = accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000001c0)=0x10, 0x80800) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x44bf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfb}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:57:20 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xe7, &(0x7f00000003c0)) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfcffffff}, 0x0) 05:57:20 executing program 3: r0 = mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000480)=""/205, 0xcd, 0x7f, &(0x7f0000000580)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x121303, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) mq_getsetattr(r2, &(0x7f0000000040)={0x3, 0x0, 0x5, 0xd3}, &(0x7f0000000180)) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x408000, 0x0) mq_getsetattr(r3, &(0x7f0000000100)={0x2, 0x4, 0x3}, &(0x7f0000000140)) (async) r4 = accept4$tipc(r1, &(0x7f0000000080)=@name, &(0x7f00000001c0)=0x10, 0x80800) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x130, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x44bf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xae3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfb}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) (async) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:57:20 executing program 1: socketpair(0x10, 0x1, 0x3d, &(0x7f0000000000)) 05:57:20 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xe8, &(0x7f00000003c0)) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async, rerun: 32) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) 05:57:20 executing program 1: socketpair(0x10, 0x1, 0x3d, &(0x7f0000000000)) socketpair(0x10, 0x1, 0x3d, &(0x7f0000000000)) (async) 05:57:20 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:20 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r0}) (async) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xe9, &(0x7f00000003c0)) 05:57:20 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x101, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}) (async) 05:57:20 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7ff7, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xea, &(0x7f00000003c0)) 05:57:20 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x101, 0x2) (async, rerun: 32) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (rerun: 32) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x50}}, 0x20008045) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 05:57:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7ff7, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) 05:57:20 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xeb, &(0x7f00000003c0)) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x50}}, 0x20008045) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7ff7, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7ff7, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x3, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)) (async) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xec, &(0x7f00000003c0)) 05:57:20 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x50}}, 0x20008045) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}]}, 0x50}}, 0x20008045) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffffffc}, 0x0) 05:57:20 executing program 3: mq_open(&(0x7f00000002c0)='j]\x9a\xad\rp\xea\x1c\xfe\xd8lR2\xb7N\xe32\x1fV\x19 \xfb>\x83\x95XU\x9ft\x11\xbc\xb0\xbf\x84i\"\x13\xefZ\xa5\x9fD\xe2\xdau\xc9\xe1<\xc1\xc3\xdc\xf2\x9b\x9b\xe9\xaf\\\xf3J\x7f\xc07\b\x18Q\xe7*\xb2\x93\xc0w\xd3M\xb0\xd00\xe6ap\x97+Dts%o\xdaq\x13\x8c\x00\xda\xe7\x0e\x06l\x04V\xb4\xa6>\xa2r\x8c\xfc\xf7\x92\x8d,%O\vU(V\xa8Y\x9a\xb8\x12u<:\x16\x91\xe3\x0fEnP\xbd\xef,X<\xee+\xaeH\xe4`\xd8\xcaS\xd3\x80K&\xa0\xeb9\xb0~\xf4\xf0\nCuP\xd3\x06z!\x81\xdc\xa83\xd1)\xef\x1c\xd5\x18v\f3\xd7\x1f0\x16\x9e\x953\xb4}\xe7\xe7MA\x87\xc4\x86\xf6\xfd\xf2\x80\xd7_\n\xac\x9as\xcb\xc6IPU\xa8w\x0f\x1c\x87\xb7J\x01c\xabo?:\x85\xdf<\x85BJ\x8c\xb7\xd8\x04k5\x9c\x88T\xb7\xbb\xadd[x\xda((\x98\xb8o\xbb\b\v\xfcZ\xe5\xd6\r\x02a\xb5\xa5}5(\x93\x92\xd5\x930V$\x83\xa7\xd7\xf3\x0f\xe9\xe1nm@\x02M`\xae\x94\x02\xdd\xa7\xf4H\xc3\xed\x96\x12\x06\x83\xd5Ii\xf2\xdb\xcd)I|\x16.)\x10\x8a\xb8|R\\\xfa\xa8\x898\xae\x15\xd6\xde\xcb\x1c\xee\x06\t\xdan4\xca\xfbN\xb1\xb5\x19\xaf\xcb', 0x2, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x8, 0x10001, 0x7df}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 05:57:20 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x101, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x0) (async) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x101, 0x2) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) (async) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xed, &(0x7f00000003c0)) 05:57:20 executing program 3: mq_open(&(0x7f00000002c0)='j]\x9a\xad\rp\xea\x1c\xfe\xd8lR2\xb7N\xe32\x1fV\x19 \xfb>\x83\x95XU\x9ft\x11\xbc\xb0\xbf\x84i\"\x13\xefZ\xa5\x9fD\xe2\xdau\xc9\xe1<\xc1\xc3\xdc\xf2\x9b\x9b\xe9\xaf\\\xf3J\x7f\xc07\b\x18Q\xe7*\xb2\x93\xc0w\xd3M\xb0\xd00\xe6ap\x97+Dts%o\xdaq\x13\x8c\x00\xda\xe7\x0e\x06l\x04V\xb4\xa6>\xa2r\x8c\xfc\xf7\x92\x8d,%O\vU(V\xa8Y\x9a\xb8\x12u<:\x16\x91\xe3\x0fEnP\xbd\xef,X<\xee+\xaeH\xe4`\xd8\xcaS\xd3\x80K&\xa0\xeb9\xb0~\xf4\xf0\nCuP\xd3\x06z!\x81\xdc\xa83\xd1)\xef\x1c\xd5\x18v\f3\xd7\x1f0\x16\x9e\x953\xb4}\xe7\xe7MA\x87\xc4\x86\xf6\xfd\xf2\x80\xd7_\n\xac\x9as\xcb\xc6IPU\xa8w\x0f\x1c\x87\xb7J\x01c\xabo?:\x85\xdf<\x85BJ\x8c\xb7\xd8\x04k5\x9c\x88T\xb7\xbb\xadd[x\xda((\x98\xb8o\xbb\b\v\xfcZ\xe5\xd6\r\x02a\xb5\xa5}5(\x93\x92\xd5\x930V$\x83\xa7\xd7\xf3\x0f\xe9\xe1nm@\x02M`\xae\x94\x02\xdd\xa7\xf4H\xc3\xed\x96\x12\x06\x83\xd5Ii\xf2\xdb\xcd)I|\x16.)\x10\x8a\xb8|R\\\xfa\xa8\x898\xae\x15\xd6\xde\xcb\x1c\xee\x06\t\xdan4\xca\xfbN\xb1\xb5\x19\xaf\xcb', 0x2, 0x0, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x8, 0x10001, 0x7df}, 0x0) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) 05:57:20 executing program 0: socketpair(0x26, 0x5, 0xee, &(0x7f00000003c0)) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7fffffff, 0x8c00) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) 05:57:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4014) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xfffffe01, 0x3, 0x0, 0x4], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2cc, 0x200, 0x10001, 0x8000, 0xfa9, 0x9, 0x6], 0x7, 0x1ff, 0x7, 0x0, 0x5, 0x10000, 0x2, {0x40, 0xd212, 0x8, 0x3, 0x4, 0x5, 0xfffb, 0x7, 0x3, 0xcbb0, 0x9, 0x0, 0x3f, 0xfff, "e3ef3184cdea1b6407a7458403d4868a3a2c607d352fba52725c8879fb5c11b3"}}) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000000000}, 0x0) 05:57:21 executing program 3: mq_open(&(0x7f00000002c0)='j]\x9a\xad\rp\xea\x1c\xfe\xd8lR2\xb7N\xe32\x1fV\x19 \xfb>\x83\x95XU\x9ft\x11\xbc\xb0\xbf\x84i\"\x13\xefZ\xa5\x9fD\xe2\xdau\xc9\xe1<\xc1\xc3\xdc\xf2\x9b\x9b\xe9\xaf\\\xf3J\x7f\xc07\b\x18Q\xe7*\xb2\x93\xc0w\xd3M\xb0\xd00\xe6ap\x97+Dts%o\xdaq\x13\x8c\x00\xda\xe7\x0e\x06l\x04V\xb4\xa6>\xa2r\x8c\xfc\xf7\x92\x8d,%O\vU(V\xa8Y\x9a\xb8\x12u<:\x16\x91\xe3\x0fEnP\xbd\xef,X<\xee+\xaeH\xe4`\xd8\xcaS\xd3\x80K&\xa0\xeb9\xb0~\xf4\xf0\nCuP\xd3\x06z!\x81\xdc\xa83\xd1)\xef\x1c\xd5\x18v\f3\xd7\x1f0\x16\x9e\x953\xb4}\xe7\xe7MA\x87\xc4\x86\xf6\xfd\xf2\x80\xd7_\n\xac\x9as\xcb\xc6IPU\xa8w\x0f\x1c\x87\xb7J\x01c\xabo?:\x85\xdf<\x85BJ\x8c\xb7\xd8\x04k5\x9c\x88T\xb7\xbb\xadd[x\xda((\x98\xb8o\xbb\b\v\xfcZ\xe5\xd6\r\x02a\xb5\xa5}5(\x93\x92\xd5\x930V$\x83\xa7\xd7\xf3\x0f\xe9\xe1nm@\x02M`\xae\x94\x02\xdd\xa7\xf4H\xc3\xed\x96\x12\x06\x83\xd5Ii\xf2\xdb\xcd)I|\x16.)\x10\x8a\xb8|R\\\xfa\xa8\x898\xae\x15\xd6\xde\xcb\x1c\xee\x06\t\xdan4\xca\xfbN\xb1\xb5\x19\xaf\xcb', 0x2, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x8, 0x10001, 0x7df}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mq_open(&(0x7f00000002c0)='j]\x9a\xad\rp\xea\x1c\xfe\xd8lR2\xb7N\xe32\x1fV\x19 \xfb>\x83\x95XU\x9ft\x11\xbc\xb0\xbf\x84i\"\x13\xefZ\xa5\x9fD\xe2\xdau\xc9\xe1<\xc1\xc3\xdc\xf2\x9b\x9b\xe9\xaf\\\xf3J\x7f\xc07\b\x18Q\xe7*\xb2\x93\xc0w\xd3M\xb0\xd00\xe6ap\x97+Dts%o\xdaq\x13\x8c\x00\xda\xe7\x0e\x06l\x04V\xb4\xa6>\xa2r\x8c\xfc\xf7\x92\x8d,%O\vU(V\xa8Y\x9a\xb8\x12u<:\x16\x91\xe3\x0fEnP\xbd\xef,X<\xee+\xaeH\xe4`\xd8\xcaS\xd3\x80K&\xa0\xeb9\xb0~\xf4\xf0\nCuP\xd3\x06z!\x81\xdc\xa83\xd1)\xef\x1c\xd5\x18v\f3\xd7\x1f0\x16\x9e\x953\xb4}\xe7\xe7MA\x87\xc4\x86\xf6\xfd\xf2\x80\xd7_\n\xac\x9as\xcb\xc6IPU\xa8w\x0f\x1c\x87\xb7J\x01c\xabo?:\x85\xdf<\x85BJ\x8c\xb7\xd8\x04k5\x9c\x88T\xb7\xbb\xadd[x\xda((\x98\xb8o\xbb\b\v\xfcZ\xe5\xd6\r\x02a\xb5\xa5}5(\x93\x92\xd5\x930V$\x83\xa7\xd7\xf3\x0f\xe9\xe1nm@\x02M`\xae\x94\x02\xdd\xa7\xf4H\xc3\xed\x96\x12\x06\x83\xd5Ii\xf2\xdb\xcd)I|\x16.)\x10\x8a\xb8|R\\\xfa\xa8\x898\xae\x15\xd6\xde\xcb\x1c\xee\x06\t\xdan4\xca\xfbN\xb1\xb5\x19\xaf\xcb', 0x2, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x2, &(0x7f00000000c0)=0x4) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x8, &(0x7f0000000180)=0x4) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_getsetattr(r0, &(0x7f0000000000)={0x6, 0x8, 0x10001, 0x7df}, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) connect$l2tp(r2, &(0x7f00000004c0)={0x2, 0x0, @private}, 0x10) (async) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xef, &(0x7f00000003c0)) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 05:57:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4014) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xfffffe01, 0x3, 0x0, 0x4], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2cc, 0x200, 0x10001, 0x8000, 0xfa9, 0x9, 0x6], 0x7, 0x1ff, 0x7, 0x0, 0x5, 0x10000, 0x2, {0x40, 0xd212, 0x8, 0x3, 0x4, 0x5, 0xfffb, 0x7, 0x3, 0xcbb0, 0x9, 0x0, 0x3f, 0xfff, "e3ef3184cdea1b6407a7458403d4868a3a2c607d352fba52725c8879fb5c11b3"}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4014) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xfffffe01, 0x3, 0x0, 0x4], 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2cc, 0x200, 0x10001, 0x8000, 0xfa9, 0x9, 0x6], 0x7, 0x1ff, 0x7, 0x0, 0x5, 0x10000, 0x2, {0x40, 0xd212, 0x8, 0x3, 0x4, 0x5, 0xfffb, 0x7, 0x3, 0xcbb0, 0x9, 0x0, 0x3f, 0xfff, "e3ef3184cdea1b6407a7458403d4868a3a2c607d352fba52725c8879fb5c11b3"}}) (async) 05:57:21 executing program 3: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x1, 0x40, 0x5e, 0x6}, 0x6) mq_open(&(0x7f0000000080)='\xbbxL\xafnZ9\xc7\x8c\xbfB(__\xc2}\xb6\xc8\xee\x96\x1d \x8b%\nH\xc2\x1e_M\x93I\xe9\x03;E\xf6\"\x8d\x85\xad\xd3\xcd\xb4\xc3_\'\x15\xe3\xd6\x98\x7fAl\xa9\"\xbe\x8e\x11\x84\x93\xc5@\xf0\xb9\xd1[s\xde\x93\b\x965\x14\x01\xces\xf0\xc5\xc4\xb0\xcd\x9e\xc2\x1c\x1aH\xf1\xbb\x85', 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7fffffff, 0x8c00) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf0, &(0x7f00000003c0)) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 05:57:21 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x4014) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0xfffffe01, 0x3, 0x0, 0x4], 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x2cc, 0x200, 0x10001, 0x8000, 0xfa9, 0x9, 0x6], 0x7, 0x1ff, 0x7, 0x0, 0x5, 0x10000, 0x2, {0x40, 0xd212, 0x8, 0x3, 0x4, 0x5, 0xfffb, 0x7, 0x3, 0xcbb0, 0x9, 0x0, 0x3f, 0xfff, "e3ef3184cdea1b6407a7458403d4868a3a2c607d352fba52725c8879fb5c11b3"}}) 05:57:21 executing program 3: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x1, 0x40, 0x5e, 0x6}, 0x6) (async) mq_open(&(0x7f0000000080)='\xbbxL\xafnZ9\xc7\x8c\xbfB(__\xc2}\xb6\xc8\xee\x96\x1d \x8b%\nH\xc2\x1e_M\x93I\xe9\x03;E\xf6\"\x8d\x85\xad\xd3\xcd\xb4\xc3_\'\x15\xe3\xd6\x98\x7fAl\xa9\"\xbe\x8e\x11\x84\x93\xc5@\xf0\xb9\xd1[s\xde\x93\b\x965\x14\x01\xces\xf0\xc5\xc4\xb0\xcd\x9e\xc2\x1c\x1aH\xf1\xbb\x85', 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf1, &(0x7f00000003c0)) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) getsockname$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) (async) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7fffffff, 0x8c00) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={0x0, 0x1}) 05:57:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) socketpair(0x9, 0x3, 0xffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000140)=""/132, &(0x7f0000000000)=0x84) socketpair(0x28, 0x1, 0x10001, &(0x7f0000000280)={0xffffffffffffffff}) r7 = eventfd(0x80000001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r5, 0x9, 0x4, r7}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x94}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0xc810) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$VT_WAITACTIVE(r9, 0x5607) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 05:57:21 executing program 3: bind$isdn(0xffffffffffffffff, &(0x7f0000000040)={0x22, 0x1, 0x40, 0x5e, 0x6}, 0x6) mq_open(&(0x7f0000000080)='\xbbxL\xafnZ9\xc7\x8c\xbfB(__\xc2}\xb6\xc8\xee\x96\x1d \x8b%\nH\xc2\x1e_M\x93I\xe9\x03;E\xf6\"\x8d\x85\xad\xd3\xcd\xb4\xc3_\'\x15\xe3\xd6\x98\x7fAl\xa9\"\xbe\x8e\x11\x84\x93\xc5@\xf0\xb9\xd1[s\xde\x93\b\x965\x14\x01\xces\xf0\xc5\xc4\xb0\xcd\x9e\xc2\x1c\x1aH\xf1\xbb\x85', 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf2, &(0x7f00000003c0)) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) socketpair(0x1a, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, 0x10) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10001, 0x400, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 05:57:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) socketpair(0x9, 0x3, 0xffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000140)=""/132, &(0x7f0000000000)=0x84) socketpair(0x28, 0x1, 0x10001, &(0x7f0000000280)={0xffffffffffffffff}) r7 = eventfd(0x80000001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r5, 0x9, 0x4, r7}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x94}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0xc810) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$VT_WAITACTIVE(r9, 0x5607) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) socketpair(0x9, 0x3, 0xffff, &(0x7f00000000c0)) (async) connect$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000140)=""/132, &(0x7f0000000000)=0x84) (async) socketpair(0x28, 0x1, 0x10001, &(0x7f0000000280)) (async) eventfd(0x80000001) (async) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r5, 0x9, 0x4, r7}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x94}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0xc810) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) ioctl$VT_WAITACTIVE(r9, 0x5607) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) 05:57:21 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf3, &(0x7f00000003c0)) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) socketpair(0x1a, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, 0x10) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) (async) socketpair(0x1a, 0x800, 0x2, &(0x7f0000000080)) (async) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, 0x10) (async) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10001, 0x400, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 05:57:21 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf4, &(0x7f00000003c0)) 05:57:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) socketpair(0x9, 0x3, 0xffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000140)=""/132, &(0x7f0000000000)=0x84) (async) socketpair(0x28, 0x1, 0x10001, &(0x7f0000000280)={0xffffffffffffffff}) (async) r7 = eventfd(0x80000001) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000500)={r5, 0x9, 0x4, r7}) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r8, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x94}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0xc810) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) ioctl$VT_WAITACTIVE(r9, 0x5607) (async) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 05:57:21 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) (async) socketpair(0x1a, 0x800, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}, 0x2}, 0x10) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x10001, 0x400, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 05:57:21 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x700000000000000}, 0x0) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf5, &(0x7f00000003c0)) 05:57:21 executing program 4: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x0, 0x28f, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x401, 0x269b}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x10000}) 05:57:21 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x10001, 0xffffffff00000001, 0x7, 0x9}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xa5, &(0x7f0000000100)=0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) 05:57:21 executing program 1: socketpair(0x2c, 0x2, 0x38, &(0x7f0000000080)) socketpair(0x26, 0x6, 0x1, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3858c2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x800000000000000}, 0x0) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf6, &(0x7f00000003c0)) 05:57:21 executing program 4: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x0, 0x28f, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x401, 0x269b}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x10000}) 05:57:21 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_getsetattr(r0, &(0x7f0000000040)={0x10001, 0xffffffff00000001, 0x7, 0x9}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xa5, &(0x7f0000000100)=0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) 05:57:21 executing program 1: socketpair(0x2c, 0x2, 0x38, &(0x7f0000000080)) (async) socketpair(0x26, 0x6, 0x1, &(0x7f0000000000)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3858c2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:21 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) 05:57:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) 05:57:21 executing program 0: socketpair(0x26, 0x5, 0xf7, &(0x7f00000003c0)) 05:57:22 executing program 4: getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x0, 0x28f, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x401, 0x269b}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x7, 0x0, 0x10000}) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 05:57:22 executing program 3: mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x10001, 0xffffffff00000001, 0x7, 0x9}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xa5, &(0x7f0000000100)=0x4) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) mq_getsetattr(r0, &(0x7f0000000040)={0x10001, 0xffffffff00000001, 0x7, 0x9}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) accept4$tipc(r1, 0x0, &(0x7f0000000080), 0x0) (async) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xa5, &(0x7f0000000100)=0x4) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) (async) 05:57:22 executing program 1: socketpair(0x2c, 0x2, 0x38, &(0x7f0000000080)) socketpair(0x26, 0x6, 0x1, &(0x7f0000000000)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x3858c2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xf8, &(0x7f00000003c0)) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x80000000, 0x7, &(0x7f0000000000)=[0xff, 0x4, 0x1, 0x7f, 0x7fff, 0x7, 0x1], &(0x7f00000000c0)=[0x2, 0x2, 0x5], &(0x7f0000000140)=[0x607, 0x8e, 0xfffd, 0x2]}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffc, 0x62, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) 05:57:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={r0, 0x2}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xf9, &(0x7f00000003c0)) 05:57:22 executing program 3: mq_open(&(0x7f0000000040)='u\xf9\xdb\xee\xd5#\x8b\x8e\vw\xedm\xf2\x02\xa8\x95\xe7\x96\xec\v4\xa1o\x168\x10*b\xa2\xa1B~\xe6\xf3]\xb6QX\'W\x99\xe1\x01\xb1\x06)J\x0f\x97!\xbaLD\xbd\x01\xe4\x89\r\xe0\x0e\xb2\xd95\xb2o\x15\xfa@nL\xf2\xbfG\xda\x93\x97\x15t\xba\x1dL4\xb3\xd0', 0x1, 0xe0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0xa5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xd2d, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x8, r3}) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r2}) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x80000000, 0x7, &(0x7f0000000000)=[0xff, 0x4, 0x1, 0x7f, 0x7fff, 0x7, 0x1], &(0x7f00000000c0)=[0x2, 0x2, 0x5], &(0x7f0000000140)=[0x607, 0x8e, 0xfffd, 0x2]}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffc, 0x62, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x724b000000000000}, 0x0) 05:57:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={r0, 0x2}) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xfa, &(0x7f00000003c0)) 05:57:22 executing program 3: mq_open(&(0x7f0000000040)='u\xf9\xdb\xee\xd5#\x8b\x8e\vw\xedm\xf2\x02\xa8\x95\xe7\x96\xec\v4\xa1o\x168\x10*b\xa2\xa1B~\xe6\xf3]\xb6QX\'W\x99\xe1\x01\xb1\x06)J\x0f\x97!\xbaLD\xbd\x01\xe4\x89\r\xe0\x0e\xb2\xd95\xb2o\x15\xfa@nL\xf2\xbfG\xda\x93\x97\x15t\xba\x1dL4\xb3\xd0', 0x1, 0xe0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) mq_open(&(0x7f0000000040)='u\xf9\xdb\xee\xd5#\x8b\x8e\vw\xedm\xf2\x02\xa8\x95\xe7\x96\xec\v4\xa1o\x168\x10*b\xa2\xa1B~\xe6\xf3]\xb6QX\'W\x99\xe1\x01\xb1\x06)J\x0f\x97!\xbaLD\xbd\x01\xe4\x89\r\xe0\x0e\xb2\xd95\xb2o\x15\xfa@nL\xf2\xbfG\xda\x93\x97\x15t\xba\x1dL4\xb3\xd0', 0x1, 0xe0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (async) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x2, r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0xa5, 0x4, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xd2d, 0x0, 0x2}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={0x0, 0x2}) (async) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x8, r3}) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r2}) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x80000000, 0x7, &(0x7f0000000000)=[0xff, 0x4, 0x1, 0x7f, 0x7fff, 0x7, 0x1], &(0x7f00000000c0)=[0x2, 0x2, 0x5], &(0x7f0000000140)=[0x607, 0x8e, 0xfffd, 0x2]}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffc, 0x62, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000180)={0x80000000, 0x7, &(0x7f0000000000)=[0xff, 0x4, 0x1, 0x7f, 0x7fff, 0x7, 0x1], &(0x7f00000000c0)=[0x2, 0x2, 0x5], &(0x7f0000000140)=[0x607, 0x8e, 0xfffd, 0x2]}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7ffc, 0x62, 0x9}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 05:57:22 executing program 3: mq_open(&(0x7f0000000040)='u\xf9\xdb\xee\xd5#\x8b\x8e\vw\xedm\xf2\x02\xa8\x95\xe7\x96\xec\v4\xa1o\x168\x10*b\xa2\xa1B~\xe6\xf3]\xb6QX\'W\x99\xe1\x01\xb1\x06)J\x0f\x97!\xbaLD\xbd\x01\xe4\x89\r\xe0\x0e\xb2\xd95\xb2o\x15\xfa@nL\xf2\xbfG\xda\x93\x97\x15t\xba\x1dL4\xb3\xd0', 0x1, 0xe0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) 05:57:22 executing program 1: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000080)={r0, 0x2}) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xfb, &(0x7f00000003c0)) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000140)={0x1, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000180)={0x2, r1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0xa5, 0x4, 0x0, 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xd2d, 0x0, 0x2}) (rerun: 32) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000100)={0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x8, r3}) (async) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r2}) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x400, 0x0, 0x0}) socketpair(0x1, 0x0, 0x8001, &(0x7f00000001c0)) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x105000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000000)={0x400, 0x8000000000000000, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x3ff, 0x3000, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000200)={r5, 0x9}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x240, 0x8, {{0x29, 0x4, 0x0, 0x3f, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0x7, [0x8, 0x8b1]}, @ssrr={0x89, 0x2b, 0x18, [@remote, @multicast2, @empty, @multicast1, @empty, @broadcast, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0x0, [{@empty, 0x7}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x27, 0x7e, [@loopback, @multicast2, @multicast1, @multicast1, @multicast1, @loopback, @multicast2, @remote, @local]}, @lsrr={0x83, 0xb, 0xa4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x7, 0x6d, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x7, [{@multicast1, 0x58}]}]}}}}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x20, 0x7, 0x1, 0x600b, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x64, 0x0, 0xbf, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x17, 0xfd, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x5, [{@broadcast, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000001}, {@empty, 0x200}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x17, [@empty, @multicast1, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x847, 0xfffc}) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x400, 0x0, 0x0}) socketpair(0x1, 0x0, 0x8001, &(0x7f00000001c0)) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x105000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) mq_getsetattr(r3, &(0x7f0000000000)={0x400, 0x8000000000000000, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x3ff, 0x3000, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000200)={r5, 0x9}) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000140)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) bind$l2tp(r0, 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) socketpair(0x2a, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4800) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x482800, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000004c0), 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3b}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_COOKIE={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x4048000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x70bd28, 0xfffffff6}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfcffffff00000000}, 0x0) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xfc, &(0x7f00000003c0)) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x240, 0x8, {{0x29, 0x4, 0x0, 0x3f, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0x7, [0x8, 0x8b1]}, @ssrr={0x89, 0x2b, 0x18, [@remote, @multicast2, @empty, @multicast1, @empty, @broadcast, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0x0, [{@empty, 0x7}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x27, 0x7e, [@loopback, @multicast2, @multicast1, @multicast1, @multicast1, @loopback, @multicast2, @remote, @local]}, @lsrr={0x83, 0xb, 0xa4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x7, 0x6d, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x7, [{@multicast1, 0x58}]}]}}}}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x20, 0x7, 0x1, 0x600b, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x64, 0x0, 0xbf, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x17, 0xfd, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x5, [{@broadcast, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000001}, {@empty, 0x200}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x17, [@empty, @multicast1, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x847, 0xfffc}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x240, 0x8, {{0x29, 0x4, 0x0, 0x3f, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0x7, [0x8, 0x8b1]}, @ssrr={0x89, 0x2b, 0x18, [@remote, @multicast2, @empty, @multicast1, @empty, @broadcast, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0x0, [{@empty, 0x7}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x27, 0x7e, [@loopback, @multicast2, @multicast1, @multicast1, @multicast1, @loopback, @multicast2, @remote, @local]}, @lsrr={0x83, 0xb, 0xa4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x7, 0x6d, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x7, [{@multicast1, 0x58}]}]}}}}}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x20, 0x7, 0x1, 0x600b, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x64, 0x0, 0xbf, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x17, 0xfd, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x5, [{@broadcast, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000001}, {@empty, 0x200}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x17, [@empty, @multicast1, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x847, 0xfffc}) (async) 05:57:22 executing program 3: mq_open(&(0x7f0000000000), 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 05:57:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) (async) socket$inet6_udplite(0xa, 0x2, 0x88) bind$l2tp(r0, 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socketpair(0x2a, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4800) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x482800, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000004c0), 0x4) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3b}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_COOKIE={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x4048000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x70bd28, 0xfffffff6}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x84) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xfd, &(0x7f00000003c0)) 05:57:22 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x400, 0x0, 0x0}) socketpair(0x1, 0x0, 0x8001, &(0x7f00000001c0)) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x105000, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) mq_getsetattr(r3, &(0x7f0000000000)={0x400, 0x8000000000000000, 0x7, 0xffffffffffffffff}, &(0x7f00000000c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, 0x0, 0x0) (async) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x3ff, 0x3000, 0x8}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000200)={r5, 0x9}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x1, 0x8000, 0x240, 0x8, {{0x29, 0x4, 0x0, 0x3f, 0xa4, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x5e, 0x0, 0x7, [0x8, 0x8b1]}, @ssrr={0x89, 0x2b, 0x18, [@remote, @multicast2, @empty, @multicast1, @empty, @broadcast, @remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0x0, [{@empty, 0x7}, {@broadcast, 0x1}]}, @ssrr={0x89, 0x27, 0x7e, [@loopback, @multicast2, @multicast1, @multicast1, @multicast1, @loopback, @multicast2, @remote, @local]}, @lsrr={0x83, 0xb, 0xa4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x7, 0x6d, [@multicast1]}, @timestamp_prespec={0x44, 0xc, 0x58, 0x3, 0x7, [{@multicast1, 0x58}]}]}}}}}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000001c0)={'tunl0\x00', r2, 0x20, 0x7, 0x1, 0x600b, {{0x21, 0x4, 0x0, 0x6, 0x84, 0x64, 0x0, 0xbf, 0x2f, 0x0, @broadcast, @local, {[@rr={0x7, 0x13, 0x7b, [@dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x13}]}, @rr={0x7, 0x17, 0xfd, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_addr={0x44, 0x1c, 0xcc, 0x1, 0x5, [{@broadcast, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000001}, {@empty, 0x200}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x23, 0x17, [@empty, @multicast1, @multicast1, @multicast1, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x847, 0xfffc}) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 05:57:22 executing program 3: mq_open(&(0x7f0000000000), 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:22 executing program 0: socketpair(0x26, 0x5, 0xfe, &(0x7f00000003c0)) 05:57:22 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) (async) bind$l2tp(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) (async, rerun: 32) socketpair(0x2a, 0xa, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES8=r2, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4800) (async) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async, rerun: 64) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x482800, 0x0) (rerun: 64) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000004c0), 0x4) (async, rerun: 32) sendmsg$IPVS_CMD_DEL_DAEMON(r3, 0x0, 0x0) (async, rerun: 32) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r5, 0x0, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3b}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_COOKIE={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c004}, 0x4048000) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x70bd28, 0xfffffff6}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x84) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) (async) socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) 05:57:22 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 05:57:22 executing program 3: mq_open(&(0x7f0000000000), 0x2, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) mq_open(&(0x7f0000000000), 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x0, r5}) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x102, &(0x7f00000003c0)) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async) 05:57:23 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) (async, rerun: 64) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000}) (rerun: 64) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x0, r5}) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x5) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}}, 0x0) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x103, &(0x7f00000003c0)) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x6, 0x3}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) (async) 05:57:23 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x5) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000140)={r4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x0, 0x0, 0x10000}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x0, r5}) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000000)=0x5) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x5}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0ffffff", @ANYRES16=r4, @ANYBLOB="000128bd7000fcdbdf25010000000000000001410000001800170000001200000b557564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20004090) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 05:57:23 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$VT_WAITACTIVE(r0, 0x5607) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x104, &(0x7f00000003c0)) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x2, 0x8, 0x20, 0x40, 0x8, 0x3, 0x37f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf2502000000050006000300000006001c000700000006001a004e200000050012000600"/62], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000000c0)={0x2, 0x42, &(0x7f0000000140)=""/66}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0ffffff", @ANYRES16=r4, @ANYBLOB="000128bd7000fcdbdf25010000000000000001410000001800170000001200000b557564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20004090) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x105, &(0x7f00000003c0)) 05:57:23 executing program 3: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0xc041) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x800, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x2, 0x8, 0x20, 0x40, 0x8, 0x3, 0x37f}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf2502000000050006000300000006001c000700000006001a004e200000050012000600"/62], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000000c0)={0x2, 0x42, &(0x7f0000000140)=""/66}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (rerun: 64) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x106, &(0x7f00000003c0)) 05:57:23 executing program 3: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0xc041) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x800, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) 05:57:23 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000140)={0x2, 0x8, 0x20, 0x40, 0x8, 0x3, 0x37f}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf2502000000050006000300000006001c000700000006001a004e200000050012000600"/62], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x0) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x107, &(0x7f00000003c0)) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000000c0)={0x2, 0x42, &(0x7f0000000140)=""/66}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000000c0)={0x2, 0x42, &(0x7f0000000140)=""/66}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) (async) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x5}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="c0ffffff", @ANYRES16=r4, @ANYBLOB="000128bd7000fcdbdf25010000000000000001410000001800170000001200000b557564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x20004090) (async) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 05:57:23 executing program 3: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0xc041) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x800, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0xc041) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r1, 0x800, 0x1, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) (async) 05:57:23 executing program 1: socketpair(0x26, 0x80000, 0x10003f, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x43f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008000) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffda7, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x108, &(0x7f00000003c0)) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x143000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000140)="42983466b32bb94ded8e305974820e7e4309191898df1166ecc754550434f7af7cbc250f6fc107c082aaf30f68c7a71a49155d34ce09e740d6cdf37144c14f96361da7568c0efbcaf2b7c180f3b8926b4f95894f990ae8f8328356eaf917fae20e5eb962116d34be4c5d501c33111cb0235be7d049bc524091046a88dabf14b34d59056d32f04ceb80f13c522f40f4af5167cccaca462e0cf93be8923cc4607541cc5dc46557910380", 0xa9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = eventfd(0x8001) fstat(r1, &(0x7f0000000000)) 05:57:23 executing program 1: socketpair(0x26, 0x80000, 0x10003f, &(0x7f00000003c0)={0xffffffffffffffff}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x43f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008000) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffda7, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) (rerun: 64) 05:57:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 05:57:23 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8941) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00208b27a400fbdbdf25010000004bde060001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 05:57:23 executing program 0: socketpair(0x26, 0x5, 0x109, &(0x7f00000003c0)) 05:57:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x143000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000140)="42983466b32bb94ded8e305974820e7e4309191898df1166ecc754550434f7af7cbc250f6fc107c082aaf30f68c7a71a49155d34ce09e740d6cdf37144c14f96361da7568c0efbcaf2b7c180f3b8926b4f95894f990ae8f8328356eaf917fae20e5eb962116d34be4c5d501c33111cb0235be7d049bc524091046a88dabf14b34d59056d32f04ceb80f13c522f40f4af5167cccaca462e0cf93be8923cc4607541cc5dc46557910380", 0xa9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r3}) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) 05:57:23 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = eventfd(0x8001) fstat(r1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) eventfd(0x8001) (async) fstat(r1, &(0x7f0000000000)) (async) 05:57:24 executing program 0: socketpair(0x26, 0x5, 0x10a, &(0x7f00000003c0)) 05:57:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 05:57:24 executing program 1: socketpair(0x26, 0x80000, 0x10003f, &(0x7f00000003c0)={0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7], 0x1, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x43f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048000}, 0x20008000) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffda7, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:57:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5, 0x0, 0x0}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x80, 0x143000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000140)="42983466b32bb94ded8e305974820e7e4309191898df1166ecc754550434f7af7cbc250f6fc107c082aaf30f68c7a71a49155d34ce09e740d6cdf37144c14f96361da7568c0efbcaf2b7c180f3b8926b4f95894f990ae8f8328356eaf917fae20e5eb962116d34be4c5d501c33111cb0235be7d049bc524091046a88dabf14b34d59056d32f04ceb80f13c522f40f4af5167cccaca462e0cf93be8923cc4607541cc5dc46557910380", 0xa9, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000200)={r3}) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x7fff, 0x2, 0x5}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r1}) (rerun: 32) 05:57:24 executing program 3: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8941) (async) mq_open(&(0x7f0000000000), 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00208b27a400fbdbdf25010000004bde060001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)) 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) r1 = eventfd(0x8001) fstat(r1, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x47, 0x10000}) (async) eventfd(0x8001) (async) fstat(r1, &(0x7f0000000000)) (async) 05:57:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 05:57:24 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x88100) 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10002, 0x47, 0x810000}) [ 1314.236514] ================================================================== [ 1314.244107] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x22c/0x240 [ 1314.251122] Read of size 8 at addr ffff8880aa984dc0 by task syz-executor.4/24005 [ 1314.258649] [ 1314.260279] CPU: 1 PID: 24005 Comm: syz-executor.4 Not tainted 4.19.211-syzkaller #0 [ 1314.268245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1314.277601] Call Trace: [ 1314.280200] dump_stack+0x1fc/0x2ef 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10002, 0x47, 0x810000}) [ 1314.283885] print_address_description.cold+0x54/0x219 [ 1314.289212] kasan_report_error.cold+0x8a/0x1b9 [ 1314.293899] ? vgem_gem_dumb_create+0x22c/0x240 [ 1314.298580] __asan_report_load8_noabort+0x88/0x90 [ 1314.303519] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1314.308723] ? vgem_gem_dumb_create+0x22c/0x240 [ 1314.313409] vgem_gem_dumb_create+0x22c/0x240 [ 1314.318021] drm_mode_create_dumb+0x27c/0x300 [ 1314.322543] drm_ioctl_kernel+0x208/0x2a0 [ 1314.326704] ? drm_mode_create_dumb+0x300/0x300 [ 1314.331386] ? drm_ioctl_permit+0x210/0x210 [ 1314.335720] ? __might_fault+0x192/0x1d0 [ 1314.339797] drm_ioctl+0x5a0/0x9e0 [ 1314.343360] ? drm_mode_create_dumb+0x300/0x300 [ 1314.348044] ? drm_getstats+0x20/0x20 [ 1314.351868] ? debug_check_no_obj_freed+0x201/0x490 [ 1314.356901] ? futex_exit_release+0x220/0x220 [ 1314.361410] ? lock_acquire+0x170/0x3c0 [ 1314.365391] ? debug_check_no_obj_freed+0xb5/0x490 [ 1314.370326] ? drm_getstats+0x20/0x20 [ 1314.374145] do_vfs_ioctl+0xcdb/0x12e0 [ 1314.378145] ? lock_downgrade+0x720/0x720 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x10002, 0x47, 0x810000}) [ 1314.382300] ? check_preemption_disabled+0x41/0x280 [ 1314.387601] ? ioctl_preallocate+0x200/0x200 [ 1314.392030] ? __fget+0x356/0x510 [ 1314.395493] ? do_dup2+0x450/0x450 [ 1314.399043] ? __se_sys_futex+0x298/0x3b0 [ 1314.403210] ksys_ioctl+0x9b/0xc0 [ 1314.406672] __x64_sys_ioctl+0x6f/0xb0 [ 1314.410597] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1314.415193] do_syscall_64+0xf9/0x620 [ 1314.419044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.424244] RIP: 0033:0x7fbaa9522409 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0xa0040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x44, 0x10000}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) [ 1314.427966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1314.446872] RSP: 002b:00007fbaa7e97168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.454593] RAX: ffffffffffffffda RBX: 00007fbaa9634f80 RCX: 00007fbaa9522409 [ 1314.462043] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000005 [ 1314.469321] RBP: 00007fbaa957d367 R08: 0000000000000000 R09: 0000000000000000 [ 1314.476595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 05:57:24 executing program 0: socketpair(0x26, 0x5, 0x10b, &(0x7f00000003c0)) 05:57:24 executing program 1: socketpair(0x26, 0x5, 0x3f, &(0x7f00000003c0)) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x88100) 05:57:24 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000000000, 0xa0040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0xffff, 0x44, 0x10000}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) [ 1314.483871] R13: 00007fff26d743bf R14: 00007fbaa7e97300 R15: 0000000000022000 [ 1314.491243] [ 1314.492893] Allocated by task 24005: [ 1314.496627] kmem_cache_alloc_trace+0x12f/0x380 [ 1314.501305] __vgem_gem_create+0x44/0xf0 [ 1314.505377] vgem_gem_dumb_create+0xcf/0x240 [ 1314.509794] drm_mode_create_dumb+0x27c/0x300 [ 1314.514297] drm_ioctl_kernel+0x208/0x2a0 [ 1314.518453] drm_ioctl+0x5a0/0x9e0 [ 1314.522000] do_vfs_ioctl+0xcdb/0x12e0 [ 1314.525889] ksys_ioctl+0x9b/0xc0 [ 1314.529347] __x64_sys_ioctl+0x6f/0xb0 [ 1314.533243] do_syscall_64+0xf9/0x620 [ 1314.537058] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.542239] [ 1314.543869] Freed by task 24005: [ 1314.547331] kfree+0xcc/0x210 [ 1314.550483] drm_gem_object_free+0x91/0x1c0 [ 1314.554857] drm_gem_object_put_unlocked+0xd1/0x180 [ 1314.559881] vgem_gem_dumb_create+0x10c/0x240 [ 1314.564385] drm_mode_create_dumb+0x27c/0x300 [ 1314.568889] drm_ioctl_kernel+0x208/0x2a0 [ 1314.573042] drm_ioctl+0x5a0/0x9e0 [ 1314.576589] do_vfs_ioctl+0xcdb/0x12e0 [ 1314.580479] ksys_ioctl+0x9b/0xc0 [ 1314.583985] __x64_sys_ioctl+0x6f/0xb0 [ 1314.587880] do_syscall_64+0xf9/0x620 [ 1314.591779] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.596960] [ 1314.598594] The buggy address belongs to the object at ffff8880aa984cc0 [ 1314.598594] which belongs to the cache kmalloc-512 of size 512 [ 1314.611250] The buggy address is located 256 bytes inside of [ 1314.611250] 512-byte region [ffff8880aa984cc0, ffff8880aa984ec0) [ 1314.623131] The buggy address belongs to the page: [ 1314.628066] page:ffffea0002aa6100 count:1 mapcount:0 mapping:ffff88813bff0940 index:0xffff8880aa9847c0 [ 1314.637512] flags: 0xfff00000000100(slab) [ 1314.641668] raw: 00fff00000000100 ffffea00029185c8 ffffea0002922a08 ffff88813bff0940 [ 1314.649555] raw: ffff8880aa9847c0 ffff8880aa984040 0000000100000004 0000000000000000 [ 1314.657432] page dumped because: kasan: bad access detected [ 1314.663137] [ 1314.664762] Memory state around the buggy address: [ 1314.669698] ffff8880aa984c80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 1314.677065] ffff8880aa984d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.684444] >ffff8880aa984d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.691803] ^ [ 1314.697260] ffff8880aa984e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1314.704626] ffff8880aa984e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1314.712152] ================================================================== [ 1314.719508] Disabling lock debugging due to kernel taint [ 1314.734510] Kernel panic - not syncing: panic_on_warn set ... [ 1314.734510] [ 1314.741903] CPU: 1 PID: 24005 Comm: syz-executor.4 Tainted: G B 4.19.211-syzkaller #0 [ 1314.751191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 1314.760543] Call Trace: [ 1314.763139] dump_stack+0x1fc/0x2ef [ 1314.766798] panic+0x26a/0x50e [ 1314.770006] ? __warn_printk+0xf3/0xf3 [ 1314.773897] ? preempt_schedule_common+0x45/0xc0 [ 1314.778655] ? ___preempt_schedule+0x16/0x18 [ 1314.783065] ? trace_hardirqs_on+0x55/0x210 [ 1314.788347] kasan_end_report+0x43/0x49 [ 1314.792328] kasan_report_error.cold+0xa7/0x1b9 [ 1314.797013] ? vgem_gem_dumb_create+0x22c/0x240 [ 1314.801689] __asan_report_load8_noabort+0x88/0x90 [ 1314.806739] ? drm_gem_object_put_unlocked+0xa0/0x180 [ 1314.811934] ? vgem_gem_dumb_create+0x22c/0x240 [ 1314.816632] vgem_gem_dumb_create+0x22c/0x240 [ 1314.821133] drm_mode_create_dumb+0x27c/0x300 [ 1314.825634] drm_ioctl_kernel+0x208/0x2a0 [ 1314.829865] ? drm_mode_create_dumb+0x300/0x300 [ 1314.834625] ? drm_ioctl_permit+0x210/0x210 [ 1314.838942] ? __might_fault+0x192/0x1d0 [ 1314.843001] drm_ioctl+0x5a0/0x9e0 [ 1314.846534] ? drm_mode_create_dumb+0x300/0x300 [ 1314.851204] ? drm_getstats+0x20/0x20 [ 1314.854993] ? debug_check_no_obj_freed+0x201/0x490 [ 1314.859997] ? futex_exit_release+0x220/0x220 [ 1314.864479] ? lock_acquire+0x170/0x3c0 [ 1314.868437] ? debug_check_no_obj_freed+0xb5/0x490 [ 1314.873358] ? drm_getstats+0x20/0x20 [ 1314.877140] do_vfs_ioctl+0xcdb/0x12e0 [ 1314.881029] ? lock_downgrade+0x720/0x720 [ 1314.885171] ? check_preemption_disabled+0x41/0x280 [ 1314.890188] ? ioctl_preallocate+0x200/0x200 [ 1314.894583] ? __fget+0x356/0x510 [ 1314.898023] ? do_dup2+0x450/0x450 [ 1314.901549] ? __se_sys_futex+0x298/0x3b0 [ 1314.905689] ksys_ioctl+0x9b/0xc0 [ 1314.909135] __x64_sys_ioctl+0x6f/0xb0 [ 1314.913009] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1314.917574] do_syscall_64+0xf9/0x620 [ 1314.921452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1314.926622] RIP: 0033:0x7fbaa9522409 [ 1314.930347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1314.949248] RSP: 002b:00007fbaa7e97168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1314.956939] RAX: ffffffffffffffda RBX: 00007fbaa9634f80 RCX: 00007fbaa9522409 [ 1314.964199] RDX: 0000000020000100 RSI: 00000000c02064b2 RDI: 0000000000000005 [ 1314.971471] RBP: 00007fbaa957d367 R08: 0000000000000000 R09: 0000000000000000 [ 1314.978732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.986011] R13: 00007fff26d743bf R14: 00007fbaa7e97300 R15: 0000000000022000 [ 1314.993443] Kernel Offset: disabled [ 1314.997057] Rebooting in 86400 seconds..