B(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x8000, 0x0) mmap$snddsp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000000, 0x10010, r0, 0x2000) mmap(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x41986000) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/244) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x5, 0x2, 0x9}) 06:45:31 executing program 5: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 06:45:31 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001], &(0x7f0000000080)=[0x0, 0x0], 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:31 executing program 0: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000bb8000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) mmap$dsp(&(0x7f0000c1e000/0x4000)=nil, 0x4000, 0x6000009, 0x4010, r1, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:31 executing program 5: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/244) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil}) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000080)={0x6, 0x4, 0x2, 0x5, 0x2, 0x9}) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:45:31 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000001600), 0x0, &(0x7f00000016c0)=""/163, 0xa3}, 0x4}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001780)=""/129, 0x81}, {&(0x7f0000001840)=""/169, 0xa9}, {&(0x7f0000001900)=""/121, 0x79}], 0x3, &(0x7f00000019c0)=""/100, 0x64}, 0x7}, {{&(0x7f0000001a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/47, 0x2f}, {&(0x7f0000001b00)=""/50, 0x32}, {&(0x7f0000001b40)=""/118, 0x76}], 0x3, &(0x7f0000001c00)=""/83, 0x53}, 0x401}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001c80)=""/238, 0xee}, {&(0x7f0000001d80)=""/180, 0xb4}, {&(0x7f0000001e40)=""/148, 0x94}, {&(0x7f0000001f00)=""/24, 0x18}, {&(0x7f0000001f40)=""/161, 0xa1}, {&(0x7f0000002000)=""/91, 0x5b}, {&(0x7f0000002080)=""/10, 0xa}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/177, 0xb1}, {&(0x7f0000003180)=""/72, 0x48}], 0xa, &(0x7f00000032c0)=""/86, 0x56}, 0x75e0}, {{&(0x7f0000003340)=@hci, 0x80, &(0x7f0000004880)=[{0xfffffffffffffffd}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/149, 0x95}, {&(0x7f0000004480)=""/184, 0xb8}, {&(0x7f0000004540)=""/64, 0x40}, {&(0x7f0000004580)=""/166, 0xa6}, {&(0x7f0000004640)=""/100, 0x64}, {&(0x7f0000004d80)=""/231, 0xe7}, {&(0x7f00000047c0)=""/145, 0x91}], 0x9, &(0x7f0000004940)=""/189, 0xbd}, 0x3}, {{&(0x7f0000004a00)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000004b00)=[{&(0x7f0000004a80)=""/101, 0x65}], 0x1, &(0x7f0000004b40)=""/83, 0x53}, 0x81}], 0x6, 0x1, &(0x7f0000004d40)={0x77359400}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/244) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil}) 06:45:31 executing program 0: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 4: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xc41, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000040)={0xfffffffffffffd7f, r0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000080)={0x7, 0x2, 0xfffffff8, 0x7}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f00000000c0)=""/244) 06:45:31 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3, r2}) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9b) 06:45:31 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x28c02, 0x0) 06:45:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x26ee, 0x0, &(0x7f0000ffd000/0x2000)=nil}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000340)={0x101, 0x5, 0x90c, 0xeb, &(0x7f0000000080)=""/235, 0xe6, &(0x7f0000000180)=""/230, 0x9d, &(0x7f0000000280)=""/157}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000001380)={&(0x7f0000000380)="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", 0x1000, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001440)={r1, 0x57, &(0x7f00000013c0)=""/87}) 06:45:31 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/112) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 06:45:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc814) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x4004891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x7, 0x0, 0x33, 0x8}, {0x6, 0xfb, 0xba}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640)='mptcp_pm\x00', 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:31 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0x81}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:31 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x40000840) 06:45:31 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffd000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:31 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:31 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 06:45:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8000080) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) 06:45:32 executing program 0: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff2000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/96) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff8000/0x1000)=nil, 0x1000}, 0x1}) [ 991.580869] audit: type=1326 audit(1617000332.022:813): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27813 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 [ 991.656241] audit: type=1326 audit(1617000332.092:814): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=27813 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 06:45:32 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8000, 0x4483, 0x7, 0x0, 0x2], 0x5, 0x800, 0x0, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x608203, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000100)=[0x8001], 0x1, 0x80800}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:32 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:32 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 0: sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x4000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff6000/0x4000)=nil) mincore(&(0x7f0000ff0000/0x10000)=nil, 0x10000, &(0x7f0000000000)=""/98) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffc000/0x3000)=nil) 06:45:32 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000000000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x6], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f00000000c0)={0x200, 0x5, 0x7, 0x9, 0x5, 0x4}) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000002000/0x1000)=nil}) 06:45:32 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:32 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ff9000/0x2000)=nil) 06:45:32 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={r4, 0x7, 0x214, 0x5, 0x1, 0x4, 0x4, 0x9, 0x9, 0x10000, 0x179}) 06:45:32 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:32 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4008810) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:32 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7ff, 0xc00) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x80000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={0x0, 0x9}) 06:45:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x181001) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) 06:45:32 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f00000000c0)={0x1ff, 0x2, &(0x7f0000000000)=[0x9, 0xd4b], &(0x7f0000000040)=[0x5, 0xecec, 0x1ff, 0xff, 0x81], &(0x7f0000000080)}) 06:45:32 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:32 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x3000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x1000)=nil, 0x7000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/101) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xf10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) 06:45:32 executing program 5: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 3: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x20000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x1000)=nil}) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)) mmap$usbfs(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x400000a, 0x110, 0xffffffffffffffff, 0x20) 06:45:32 executing program 2: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x401, 0x1, 0x200, 0xe180, 0x10001, 0xfffff000, 0x1000, 0xfff, 0x0, 0x822b], 0xa, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 06:45:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x2000)=nil) 06:45:32 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)="3f14f8c1658a37248f1fe99fcba57bc32083a7be65c398249a3feec0c58ea3cf03da46605cba7e581a2754d745bba4e4d64c52adf693fa6c51f478f89a3978ef56865849dda66172b2b83358136d2f4fd137e4dc2b4bbaa5233873aa0d1e6453bba423c17e78d4b37619c986c6ca0c5655bd9557247e8387ae1fd9ccccbeff4f9535661108eb97af8ed61847f19de44c67a59999cd23302b5820d8c465cd8efee7eb87e8ab5d489691dfc008d8136e5f5161ae00a8c142cc836c55cd8371bde58d089dac014b8e96", 0xc8}, 0x68) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_IE={0x43, 0x2a, [@measure_req={0x26, 0x38, {0x1f, 0x3, 0x9, "bc562aa2e2eb8fc68b20894b13fe3ef4f338ba7685062f0cb0fe93b9ac34a5c56af94cf84de2ce5773806b747eed300a021b4a61af"}}, @channel_switch={0x25, 0x3, {0x0, 0xa1, 0x20}}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x80000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x50) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00', r0) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x24) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) mmap$snddsp(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r0, 0x2000) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/114) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) 06:45:32 executing program 3: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) pkey_alloc(0x0, 0x2) 06:45:32 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:32 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ff0000/0xe000)=nil}) mincore(&(0x7f0000ff8000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/100) 06:45:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:32 executing program 2: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:32 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x202000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x81) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000100)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x420000, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x50, 0xffffffffffffffff, 0xfffffffffffffff9) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="46537e09451fe38d368abf892eeee37c93fae24f7bee4709465fbfea1c9aa416162005a9466cb59af7a4526c2928925dceb6dc175f11a5f63d8114b80c1a459297dbb7cbd14a9d49ba8d69458785ff0ea6d286f1e69e64688c11c1ef7bd9627ab16fe65be462915588ef754b041d4150055a29aacc04fe7c6626072d7e32c6f0823ab9b65c08488f23cfe3de39cb41c6082b834a6b980742cdaa730c6c755429a2e8ac7281a06a4c62c26b8d3702aca6cfb13f89c45134e89344e3cbe3b789a635dfb5c6a4ceedce2a9c", 0xca}, 0x68) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000380)={0xc4f, 0x7f, 0x5, 0x60, &(0x7f0000000180)=""/96, 0x9f, &(0x7f0000000200)=""/159, 0x99, &(0x7f00000002c0)=""/153}) 06:45:32 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) 06:45:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:32 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x83000000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:32 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:32 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0xd000, 0x10, &(0x7f0000ff0000/0xd000)=nil) 06:45:32 executing program 4: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 06:45:33 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xf0b, 0x1) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0xffffffe0, 0x0, 0xa, 0x3, 0x6}) 06:45:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:33 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffb000/0x3000)=nil) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x1, &(0x7f0000ffb000/0x4000)=nil, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x8, 0x9, 0x8], 0x3, 0xc0000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000002, 0x12, r2, 0x0) 06:45:33 executing program 2: socketpair(0x28, 0x0, 0x3a6, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:33 executing program 4: ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x2, &(0x7f0000000080)=[{0x5, 0x4, 0xffff, 0x2}, {0x7f, 0x1c0, 0xee, 0x7fff}]}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0xecc, 0x2, 0x22}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)={0x3c1862ef}) 06:45:33 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:45:33 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xe4, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x334b}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x27}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x79f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x24008880}, 0x1) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget$private(0x0, 0xf000, 0x1000, &(0x7f0000ff1000/0xf000)=nil) 06:45:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:45:33 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x2, 0x3ff, 0x6, 0x1000003, 0x3, 0xe96b}) 06:45:33 executing program 4: prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffb000/0x3000)=nil) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x0) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/104) 06:45:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) 06:45:33 executing program 4: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffc000/0x2000)=nil) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 06:45:33 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x616801, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="e385b01e9c10d8948ea9ea84dd55314c59da06b27a", 0x15, 0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={r1, 0x3b, &(0x7f00000000c0)=""/59}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1}) pkey_alloc(0x0, 0x3) 06:45:33 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffa000/0x3000)=nil) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000004980)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000004ac0)={&(0x7f00000049c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="3fc31e7c903c33688f722f50c8665c132053878985a200702aa4ddef4da40627b16882ee47c474b5774bb9875392c698e6ea0566a790a98da5ffc2dbb6c4cae529721882a425d8472851a1e23f1b4b", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf255700000008000304", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80)='ethtool\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000006) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/89) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 06:45:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 4: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x100) 06:45:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x12b000, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000005, 0x11, r2, 0x7) fcntl$getown(r1, 0x9) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x2000)=nil) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100, 0x7fffffff, 0xd984, 0x5, 0xb1d0, 0xdc0, 0x1}, &(0x7f0000000200)={0x2, 0x0, 0x3, 0x800, 0x8, 0x401, 0x200, 0xffffffffffffffe5}, &(0x7f0000000240)={0xf11f, 0x7ff, 0x100000001, 0x100, 0x9, 0x8, 0x9, 0x1f}, &(0x7f00000002c0)={r3, r4+10000000}, &(0x7f0000000340)={&(0x7f0000000300)={[0x101]}, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x80000, 0x0, 0xffffffffffffffff}) clock_getres(0x7, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000080)="ef51b796b4481bc6f1d6ddd17fbb1d17697a573bca0bcd4a16322a94eb6a7f526d0e568e6a034a4d3d1d064c12a5de22d797ca026fa339599faae6dad54c03ee572dcd0d31203e3d3973d454cc5047920afc5fbd4f2ca2c57702189aa06686d48e57149b52a03fa7f553b95e7bf82deaeb621af1e0e0b5226cd89695f0830b52df1bb62fb0c5c1c94ec748e26ff848e0bf60301e310dfc9680155e5dd8293d5796fb32fb1d60a122131c04218126a515ec4ca9", 0xb3}) 06:45:33 executing program 3: ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_control(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1000004, 0x24010, 0xffffffffffffffff, 0x83000000) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xa4400, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r0) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffe000/0x1000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080027bd7000c513cb5e23000000050027002000000005865e1708000000030af133c05291002300063d40d8e500250002000000050021007f0000000500270004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x900}, 0x4000044) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000c, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 3: ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 2: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f0000001480)={&(0x7f0000001380), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000840}, 0x10) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001200)={0x1f, 0x535, 0x38bb933e, 0xd4, &(0x7f0000000040)=""/212, 0x1000, &(0x7f0000000140)=""/4096, 0x95, &(0x7f0000001140)=""/149}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9f, 0x490802) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000015c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000014c0)="9fc63bb9969a3f4f9ccef1d6827e899719ad6fea70e83e741740769f9209088e5de47b83020b6c64222f6843e4b5118c80b4ca3e4d2ed9cfca945b1d4ee8d6a82e3b2433b2933de666dba4011d5dfb709e98245999af8b20d6e06595ffb304c9484a474c671b9db801d6024f094653a4dc215b7164284f156c78da92664c43262af3f13c04af4aa2b38cc481af33f223b9d5c7f0a65c72c3a6866341e40e195d23e035f8e47d842834dc5b0d84513e3ba8a0bca72af4c4a7bc2184b40eaea3e465af806966f460165c83014c9753d147962483c01d59955b5c7d8d8c626ed317a628198f0bb9031e173e3622d3fad4", 0xef, r3}, 0x68) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16) 06:45:33 executing program 3: ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 1: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) shmget$private(0x0, 0x13000, 0x800, &(0x7f0000fed000/0x13000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mmap$binder(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0xeb) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x1}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000080)={0x0, 0x400040000000}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) 06:45:33 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000001c0)={0x1, 0x9, &(0x7f0000000080)=[0x0, 0x1, 0x0, 0x8, 0x33, 0x0, 0x17, 0x72, 0x8], &(0x7f00000000c0)=[0x0, 0x0, 0x5, 0x0, 0x400, 0x4], &(0x7f0000000100)=[0x4, 0x8, 0x3, 0x2f8d, 0x1f], &(0x7f0000000180)=[0x6, 0x2, 0x1, 0x80000001, 0x0, 0x9, 0x2, 0xfff, 0x8], 0x0, 0xa8a}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x9, 0x4, 0x3], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:33 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x8010, 0xffffffffffffffff, 0x82000000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff6000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/101) 06:45:33 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) shmget(0x1, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil}) 06:45:33 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10001}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:33 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:33 executing program 4: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000c00000/0x400000)=nil) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000007, 0x10010, 0xffffffffffffffff, 0x83000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000c84000/0x4000)=nil, 0x4000}) 06:45:33 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc, r0) 06:45:33 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x5, 0xe5, 0x1, 0xffffffff, 0xe4, 0x5, 0x4, 0x2}) 06:45:34 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffd000/0x1000)=nil) 06:45:34 executing program 0: mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap$usbfs(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1, 0x8010, 0xffffffffffffffff, 0x4b7) 06:45:34 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x40010, 0xffffffffffffffff, 0xe000) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x88, 0x1, 0x7, 0x2, &(0x7f0000000040)=[{0x1, 0x3, 0x1, 0x9}, {0x3f, 0x3, 0x1, 0x2}]}) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 1: pkey_alloc(0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000000)={0xfffffffffffffffa, 0x4}) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x16840, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) [ 993.595219] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 993.628052] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:34 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffe000/0x1000)=nil) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 06:45:34 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x2000000, 0x50, 0xffffffffffffffff, 0x82000000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:34 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mincore(&(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/220) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100008000000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, 0x0) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8) 06:45:34 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x810, 0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbfs(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x4) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = userfaultfd(0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x1}) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x1000)=nil) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}}) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x10) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 06:45:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, 0x0) 06:45:34 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2d2002, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x30, r2, 0xa3a04000) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0x1f}, 0x2) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x2010, r0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00', r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x800, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20040001) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200080, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 4: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000000)={0xc}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ff4000/0xc000)=nil) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x9, 0x35}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000200)={0x1000, 0x5, 0x4, 0x5b, &(0x7f0000000000)=""/91, 0xcf, &(0x7f0000000340)=""/207, 0x7f, &(0x7f0000000180)=""/127}) 06:45:34 executing program 0: ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={0x0, &(0x7f0000000080)=""/146}) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/87) 06:45:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, 0x0) 06:45:34 executing program 4: sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a00)={&(0x7f0000000040)={0x29b8, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x3a, 0x2a, [@mic={0x8c, 0x18, {0xee0, "b0a9af706245", @long="b5b8d6a7c9b629503f7ff60878d1596f"}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x6, 0x0, {0x7fff, 0x8, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x40, 0x85}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x11df, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x11}, 0x9, 0x5e, @broadcast, 0x3, 0x9, 0x8}}, @perr={0x84, 0x11c, {0x81, 0x12, [@not_ext={{}, @device_b, 0x8000, "", 0x3a}, @not_ext={{}, @broadcast, 0x4, "", 0x21}, @ext={{}, @broadcast, 0x5, @device_a, 0x4}, @not_ext={{}, @device_b, 0x4, "", 0x11}, @ext={{}, @device_b, 0x3, @broadcast, 0x6}, @not_ext={{}, @device_a, 0x1, "", 0x27}, @ext={{}, @device_b, 0x0, @device_a, 0xb}, @not_ext={{}, @device_a, 0x6, "", 0x29}, @not_ext={{}, @broadcast, 0xfffffffd, "", 0x3b}, @not_ext={{}, @broadcast, 0x3, "", 0x3a}, @not_ext={{}, @device_b, 0x1, "", 0x42}, @not_ext={{}, @device_a, 0x0, "", 0x1e}, @ext={{}, @device_a, 0x3}, @ext={{}, @device_a, 0x6, @device_a, 0x36}, @ext={{}, @broadcast, 0x7, @device_a, 0x36}, @ext={{}, @device_b, 0x9, @device_b, 0x2a}, @not_ext={{}, @device_b, 0x800, "", 0x36}, @ext={{}, @device_b, 0x20000, @device_b, 0x13}]}}, @measure_req={0x26, 0x1003, {0x4, 0x9, 0x0, "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"}}, @tim={0x5, 0x81, {0x4, 0x9c, 0xf9, "3c851d88d8d561fc0a9b3b914a29318d77bf38f213331d57b395d9aee41053e7e1184863e36f6a251ca535713291ee8f561add09fe946eab9ce3ec6c31d9bbfdd0d814b2cbc92b64e02ea2897d952ee887d09c412561438943d210d33a53855b2df21f828ee895d24fc347017ac5860366662c8cdec7b3eda236667439d4"}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x10, {0xfff, "0f6ad31d0b56", @short="40fccd9f840d1ce7"}}, @ibss={0x6, 0x2, 0x9fc}]}, @NL80211_ATTR_BEACON_HEAD={0x4a3, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7f}, @device_a, @device_a, @from_mac, {0x1, 0x5}}, @ver_80211n={0x0, 0x1f, 0x3, 0x1, 0x0, 0x2}}, 0x7f, @random=0x4, 0x8, @val={0x0, 0x20, @random="e38abbcb948ecfa86199adbf7bb72b70cae0caa7769d28e65e048253bfdefab6"}, @val={0x1, 0x2, [{0x9, 0x1}, {0x12}]}, @val={0x3, 0x1, 0x54}, @val={0x4, 0x6, {0x3, 0x0, 0xffff, 0x7}}, @void, @val={0x5, 0x44, {0x7f, 0x49, 0x1, "dc22d1b673468b2b3376b13df8fbcc7671fc6aa51ed52184e392c252a6c1e6fb5f5bcf56a64bf3d60ca28f0ab93a9370f80026d24145f710e003d68539b2602e24"}}, @val={0x25, 0x3, {0x0, 0xb1, 0x50}}, @void, @val={0x3c, 0x4, {0x1, 0x9, 0x70, 0x7f}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x0, 0x1, 0x9}}, @void, [{0xdd, 0x46, "376e4eaf0aa16131a0e44fd68b56331eb5f839048ba54304e798bea0df1f3822499914bd17be2df1f0575786e10c2b6222c77014c21ceb7189eacd841d809152990be273d159"}, {0xdd, 0xad, "6732543dbf520b7f670e1fbecc265a9496e11ba10cb1c7ccb5da2423721193034762d6e2461080b0d166a668595e699c7ed9d3f25cf8458e1cd125c62901e54debd4347ba7a8e4b56bfdc4d74208d36026c7a02402ff86646dcf84b0f16c3b505a1b4b35b074de32609e5720040a40418189b9045bc036bcfac163f81e7e8d0e85ce7253ae49afbf027a740aa0f2a9031d3a421beeaaffab8e8d051344f74ef65f358364c6a57b7559df454fac"}, {0xdd, 0xf0, "b127046c4b08144c4082e4dfa244bd0c227a10a615537670df7e9de868835034079d04f7042e6ffa6b9ea8714e792ba379c4a4c531acddcf230d294a5fac291b4e0032174909fecb935eb36f97e4cffb45b56212ec28f2ec46cb5e2afdc9a226f80fa9f265a6b11002bbcefdb883dc74f267edf4857145e966712a38cb66b335dc7cf175e664e8c9b52d9ead9e6e3bbcb25fd547bc1c2ec605e38ec27b0c3fe613b1d44e9413ddd57d76341282f28e6194e6bb0988eb45f663739c60d2c223af96e5477eac62b1d72d2c15c91d6fb05e17a20d9d961d12dc7de0bcc254eed5345a78a47ef63d5369fa95ea6c0ac7c5ea"}, {0xdd, 0xb6, "221fc52f395eefbb2a4e198ce43e2f7fcbb6193d66dfd7ade91cb48e1535bbd4789ca98b88e12b1518fa98ba22ab591c03971afd07a5ed52ef0d5e83a3fdf4ea8b5ea5903bdb7fed68a222e633e4592c66c47cc9f1bc5779a60e3fc38c1604efb0d4fb457b474ecfd8afd7829847c19dc6012e60613bf6d5ff8c2e6a8776ce9aff25845baa4906477340bd6a753292460d2da7badefd2389e866bd570b8d625dfea04887b03acaefbb990ff8268a367c56d90fb539a8"}, {0xdd, 0x26, "9ac03aa61968ee94a1a09345e49c340038dc872443af87c7ba4fb7fad188960f7266c56a116c"}, {0xdd, 0x4b, "2c12833dd4956e27870c2e38ea946995dcac2eaea2a6e6c3393bc1098ff44b27daf2bf66be6c2d75de28ebb1e9384d21a52a9c08e2a0ac96896ae6008a65303f944c9d0537f8b2f45cf60f"}, {0xdd, 0x9b, "2f39d26585494424349688a73ff01dacca4c47daff8119f7f3e2b661a0dd3f10d9355e511fc8e093315ff118466967bdf20b3ff123d001a7258724bb74b31a713ab9e94785fd2c2e711c6de3a4135868b21a779f40e0d8de3d83dc6372247ac69e2d947fc748f27795ed6c60e439d75778b90a76deec276ee8958fd9a50bbf79a7089f141a0fed3a87a0690b3ddbec48687eccfbfc0406a3b2b23c"}, {0xdd, 0x37, "c35a533a52b09600b299ec841551798c30a40c3900391d6cfbc06276259ca1e603e1adf277f6c8b1dc8133dd6343be8d0e325186c3a2b1"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x12e4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x53, 0x3, "72dedd885f04b06f359bd0ef200440bdd16df3c139669b8e10a543736fb93900cc47081193f16b7aca1a001622a4bb0db2ad8c564d4bafe365060778236cbc01b8949ba308a0b0d4946c8602baa7a1"}, @NL80211_FTM_RESP_ATTR_LCI={0xa2, 0x2, "6598af0f840ae14becd55775e932740c49a6d1fa7debc3da163af13088930de3447229b11344290ad78f8ffd2f5b00cd177f442e32c8ec9b067f60670e062444becf5a46355a1ab7d4a0443d653d1cf483fc333665cd7c27591cefaafa704ea24d1a5c69dec6ea5e220153fe79b34a97df2d36f2d9062fe11cc45e0050c380d895fcf99c4726daaaee8b840bd23ed2b4f3de3641f5e3271fcd3029034402"}, @NL80211_FTM_RESP_ATTR_LCI={0x97, 0x2, "a1981b43d589cef40a640b603bfd4a29c625ffe22da93ab760727e28f349940c699c09cba828836c5934ae11f0616c16a7b4b5da34244a6d93d5983ea574a94e5f89289e2ed2f4f747162132f9795d860ceccab25e2dc590ace0c27efb5f1793009afce1e2925394ed7683d5c801a092af31a16bb5d3d6e1da1a720858e7ab08f330df20d026dae0efb7cce049c9bc6ed548db"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x61, 0x3, "9f77e73c8395de983bd967ba0bd01a09acfb57495be6a6cc35dd8b55a1e3ced00a1b352937ead218889850e35742c714ab672bcdc237200d0ed117890b448fe8d9c6eff015575d45eb14dd14460bd2c45b634bf7dd2bd2ca5eafdd79b7"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xda, 0x2, "374288ada2ff2e0d03fb100ca4dc23dc10716aecc7d9dd910974132cc882d68f90bb514d3dab438739d4096e582998513ee367e50b5633b7cc486b25452867c1ab16682bb090820e6a384d762bfbe64c036e10afb81b250073cf709d37756a7a2eb9f2e569a6e1c5eb6d168f8b89efebe452c1e7db8725479fa5d02716b79e530be40522fee65acd2cbdbb986eba655e4768688b1388228fa4451ab4cc2da1f7ca1781b229db25cb554431f6cdf85c98fcfff7953947f22a1227af509ae72354033aecdb8f7887c8f14863673348ffe63d32beed1468"}]}]}, 0x29b8}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) 06:45:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x0, 0x5}) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000fddbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="040028000a000600080211000000000044005080040005000400060005000200040000000500090002000000110001008654a459b236c1ce063bbf309a00000011000100f0b389ce9523b3678b020b1200000000"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4010) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x202001) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000040)=0x80) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) 06:45:34 executing program 1: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0x7, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x9, 0x20000) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000340)={0xc716, 0x3, 0x3f, 0xd73}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008010) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) move_pages(0x0, 0x8, &(0x7f0000000080)=[&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff9000/0x1000)=nil], &(0x7f00000000c0)=[0x3f, 0x7fffffff, 0x1, 0x3, 0xfffffff9, 0x2], &(0x7f0000000100), 0x6) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/34) mmap$snddsp(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x200000c, 0x40aa013, r0, 0x7000) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ff6000/0x1000)=nil) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 1: fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000040)) getpgid(0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x40010, 0xffffffffffffffff, 0x5) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x1, 0x4010, r0, 0x8cc94000) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0x7, 0x7, 0x7], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x0, 0x80}) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[0x8]}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 06:45:34 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r0, 0x2, 0x70bd27, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x4, 0x1, 0x7, 0x6}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x9, 0x20000) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000340)={0xc716, 0x3, 0x3f, 0xd73}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x0, 0x8, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x0, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008010) 06:45:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) 06:45:34 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000080)={0x0, 0x12}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000003, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:34 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0xdce, 0x5, 0xc3}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="812e57333daf8fd4de71f0c923c4226b3bdc0e769203a520b72f28b4caef8979077db913a867da420ab791151a0861edd01809774b86c628437ee8b177a7752d7c5ed1c708c6f73e00233d900462ad8042ccfc459fb304eddc6309b4271b85a2c86cc4cfde4f9b37bc2f32a4a6b2e53d98e22f62a819f63bec84fdab6dd92bdbae0884e94c092a97f39e6258df81358d18", 0x91, r0}, 0x68) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1e53a00000000000) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x200800) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:34 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x28000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x9) 06:45:34 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 06:45:34 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) 06:45:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:34 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 06:45:34 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000004, 0x110, 0xffffffffffffffff, 0x83000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x34}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x9, 0x11, r1, 0x83000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 06:45:34 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="812e57333daf8fd4de71f0c923c4226b3bdc0e769203a520b72f28b4caef8979077db913a867da420ab791151a0861edd01809774b86c628437ee8b177a7752d7c5ed1c708c6f73e00233d900462ad8042ccfc459fb304eddc6309b4271b85a2c86cc4cfde4f9b37bc2f32a4a6b2e53d98e22f62a819f63bec84fdab6dd92bdbae0884e94c092a97f39e6258df81358d18", 0x91, r0}, 0x68) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1e53a00000000000) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/100) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="812e57333daf8fd4de71f0c923c4226b3bdc0e769203a520b72f28b4caef8979077db913a867da420ab791151a0861edd01809774b86c628437ee8b177a7752d7c5ed1c708c6f73e00233d900462ad8042ccfc459fb304eddc6309b4271b85a2c86cc4cfde4f9b37bc2f32a4a6b2e53d98e22f62a819f63bec84fdab6dd92bdbae0884e94c092a97f39e6258df81358d18", 0x91, r0}, 0x68) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1e53a00000000000) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/214}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) 06:45:35 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/246) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="812e57333daf8fd4de71f0c923c4226b3bdc0e769203a520b72f28b4caef8979077db913a867da420ab791151a0861edd01809774b86c628437ee8b177a7752d7c5ed1c708c6f73e00233d900462ad8042ccfc459fb304eddc6309b4271b85a2c86cc4cfde4f9b37bc2f32a4a6b2e53d98e22f62a819f63bec84fdab6dd92bdbae0884e94c092a97f39e6258df81358d18", 0x91, r0}, 0x68) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1e53a00000000000) 06:45:35 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000fe8000/0x4000)=nil, 0x4000, 0x280000e, 0x30, r0, 0x36a17000) prctl$PR_SET_MM(0x23, 0x250452d5cbaaecab, &(0x7f0000fec000/0x13000)=nil) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fea000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000140)="52522c66e1eca0904531187ad07f8bf7f632ff5f9f52344aa3e6c178d241f5e5b00a99984de1925e522af1d8c28cce009c3c0881f8f9ae1a29fb732766cf1e6126c38553ae78116078723bf1aee7eb46a86bc49ecc7d0420d6e76aa09e13bdee7e1adbd8a2869488fd23047ae5988c8ecc9fa98b064c7422377c5b7dc98efc826ac72f0c8105ace5dd8da97d6f59c5c01c2fbed5c0d62b6798c3b371b142709c3e25b7cf53bff36eed673de99365d7999b2a3c4882e05842989b40d4d82c79b1bbd3a51f58b3f81eb9e18b14b10abf2cbcd73e30201cede5648bd322bb67f0cae84aee7667576ba12cfacce111d2009b10", 0xf1, r1}, 0x68) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x300000f, 0x13, 0xffffffffffffffff, 0x4e) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x100000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fec000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000000000)="2057e39a9cc23150c4dd3f149f4cddbdc9e6bc3b293e375b3b6fdc7d517679570e6b763a5d73520a089d7402dd984de97a9ebe8210f1e677d2a4c2b5cb889346e58e13da3abe76a31d2734935efffdb88b38a36dc14fb60627cbe973713979583e7292dd2d28d9de31f25bf68175327169d6ea0b2251ffe5d0cdeb429eae23a162d121f9650e190463b76536c6", 0x8d, r2}, 0x68) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0x6f, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x607d28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0xfffffffffffffe80}, 0x1, 0x0, 0x0, 0x4008004}, 0x40040c4) 06:45:35 executing program 0: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f00000000c0)={0xc000000, 0xfffffff8, 0x500, 0x8, 0x16, 0x2c}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="812e57333daf8fd4de71f0c923c4226b3bdc0e769203a520b72f28b4caef8979077db913a867da420ab791151a0861edd01809774b86c628437ee8b177a7752d7c5ed1c708c6f73e00233d900462ad8042ccfc459fb304eddc6309b4271b85a2c86cc4cfde4f9b37bc2f32a4a6b2e53d98e22f62a819f63bec84fdab6dd92bdbae0884e94c092a97f39e6258df81358d18", 0x91, r0}, 0x68) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x200000c, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil}) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/142}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f00000000c0), 0x0, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff8000/0x2000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:35 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x4], 0x2, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x800]}) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x1000)=nil) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x78000700, &(0x7f0000ff8000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x1000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:35 executing program 1: sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf25010000000000000009410000084c00180000000973797a310000000020000000000200000000002000000000000000000000000000000000000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x91}, 0x40000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000780)=[{&(0x7f0000000480)=""/58, 0x3a}, {&(0x7f00000004c0)=""/223, 0xdf}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/161, 0xa1}, {&(0x7f0000000700)=""/125, 0x7d}], 0x5, &(0x7f0000000800)=""/18, 0x12}, 0x400}, {{&(0x7f0000000840)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/20, 0x14}, {&(0x7f0000000a00)=""/39, 0x27}, {&(0x7f0000000a40)=""/55, 0x37}, {&(0x7f0000000a80)=""/254, 0xfe}, {&(0x7f0000000b80)=""/154, 0x9a}, {&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/54, 0x36}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x9, &(0x7f0000002d40)=""/15, 0xf}}], 0x2, 0x42, &(0x7f0000002e00)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000005540)={'batadv0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000005580)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000005600)=0x80) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000005740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000005700)={&(0x7f0000005640)={0x8c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x84434dd9d3e68296}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004014) 06:45:35 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x1ff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 4: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x3000)=nil) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x565501) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x8, 0x10, r0, 0x83000000) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff8000/0x1000)=nil, 0x3, 0x3, 0x41}) 06:45:35 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 06:45:35 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f00000000c0)={0x10001, 0x5, &(0x7f0000000000)=[0xfdbb, 0x9, 0x1f, 0x7, 0x1], &(0x7f0000000040)=[0x1ff, 0x9, 0x8, 0x800, 0x6], &(0x7f0000000080)=[0xc, 0x7, 0x1, 0xc46, 0x80]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:35 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:35 executing program 1: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0xe4, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe8bb}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:35 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 06:45:35 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) getsockname(0xffffffffffffffff, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@can={0x1d, 0x0}, &(0x7f0000000480)=0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x138, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4804}, 0x4000010) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xfffffffffffffffd) 06:45:35 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/131) userfaultfd(0x0) 06:45:35 executing program 3: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @fixed={[], 0x10}, 0x7}, 0xa) openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fffffff, 0x20, 0xfffffffd}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000040)={0x7, 0x7fff, 0x74}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xb0, 0x0, 0x10, 0x70bd2d, 0x25dfdc01, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00', r2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000100)={0x2, 0x3, 0x80000000, 0x2, &(0x7f00000000c0)=[{0x0, 0x3, 0x9, 0x2}, {0x7, 0x3ec0, 0x401, 0x5}]}) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000140)={0x0, 0x1}, 0x2) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:35 executing program 3: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 06:45:35 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x1720, 0x0, 0x3, 0x4}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0xc0000, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x8, 0x4, 0x0, 0x6296}) 06:45:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x100) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000000c0)={r2, &(0x7f0000000180)=""/173}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4087, 0xff7}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f00000011c0)=""/189, 0xbd}, {&(0x7f0000001280)=""/227, 0xe3}], 0x5, &(0x7f0000001400)=""/4096, 0x1000}, 0x1}, {{&(0x7f000000a0c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005880)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/190, 0xbe}, {&(0x7f0000003580)=""/21, 0x15}, {&(0x7f00000035c0)=""/26, 0x1a}, {&(0x7f0000003600)=""/130, 0x82}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/236, 0xec}, {&(0x7f00000047c0)=""/70, 0x46}, {&(0x7f0000004840)=""/60, 0x3c}, {&(0x7f0000004880)=""/4096, 0x1000}], 0xa, &(0x7f0000005940)=""/160, 0xa0}, 0x5}, {{&(0x7f0000005a00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005a80)=""/108, 0x6c}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005b40)=""/239, 0xef}, {&(0x7f0000005c40)=""/87, 0x57}, {&(0x7f0000005cc0)=""/197, 0xc5}, {&(0x7f0000005dc0)=""/44, 0x2c}, {&(0x7f0000005e00)=""/109, 0x6d}, {&(0x7f0000005e80)=""/255, 0xff}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/113, 0x71}], 0x8, &(0x7f0000007080)=""/253, 0xfd}, 0x9}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000007180)=""/250, 0xfa}, {&(0x7f0000007280)=""/5, 0x5}, {&(0x7f00000072c0)=""/172, 0xac}, {&(0x7f0000007380)=""/100, 0x64}, {&(0x7f0000007400)=""/218, 0xda}, {&(0x7f0000007500)=""/44, 0x2c}, {&(0x7f0000007540)=""/188, 0xbc}, {&(0x7f0000007600)=""/194, 0xc2}, {&(0x7f0000007700)=""/88, 0x58}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}}, {{&(0x7f0000008840)=@caif, 0x80, &(0x7f0000009dc0)=[{&(0x7f00000088c0)=""/151, 0x97}, {&(0x7f0000008980)=""/156, 0x9c}, {&(0x7f0000008a40)=""/124, 0x7c}, {&(0x7f0000008ac0)=""/108, 0x6c}, {&(0x7f0000008b40)=""/107, 0x6b}, {&(0x7f0000008bc0)=""/206, 0xce}, {&(0x7f0000008cc0)=""/4096, 0x1000}, {&(0x7f0000009cc0)=""/244, 0xf4}], 0x8, &(0x7f0000009e40)=""/154, 0x9a}, 0x8000}], 0x6, 0x2000, &(0x7f000000a080)={0x77359400}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f000000a140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)="2fea8deb0ecf1a2eaba5670819eae735e6e32feefd39de5d15fd68d1fd6c2df68fb5193ac3bdccb00b759875bbcc8f054a272511e2b7887f256c2d52d9e6368e800bd88aa486cde2d61a261f26b4d5aa0420ffc4dda72c7cc912f357643d791382f63dceee320dddb9dd1f23918f80890c4ced0f283dae86d56bfc53", 0x7c, r0}, 0x68) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000002400)=""/110) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f000000a280)={&(0x7f000000a1c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000a240)={&(0x7f000000a200)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {}, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0x100000001) 06:45:35 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:35 executing program 3: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 06:45:35 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x7fffffff, 0x4a5b0023, 0x1ff, 0xa6, 0x4, 0x5, 0xfffff000}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:36 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x5, 0x0}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={r1, 0x659}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) 06:45:36 executing program 3: msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff8000/0x1000)=nil, 0x3, 0x3, 0x41}) 06:45:36 executing program 1: r0 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) [ 995.571006] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format [ 995.598168] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x8, 0x5], 0x3, 0x80000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff7000/0x3000)=nil, 0x2, 0x3, 0x5b}) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff8000/0x1000)=nil, 0x3, 0x3, 0x41}) 06:45:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x66900) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7ff, 0x8, 0x10001], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x1f, 0xfb, 0x0, 0x7, 0x6, 0x1}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000100)={0x0, 0x3c}) 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c008010}, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000009f00)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4087, 0xff7}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000100)=""/55, 0x37}, {&(0x7f00000011c0)=""/189, 0xbd}, {&(0x7f0000001280)=""/227, 0xe3}], 0x5, &(0x7f0000001400)=""/4096, 0x1000}, 0x1}, {{&(0x7f000000a0c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005880)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/190, 0xbe}, {&(0x7f0000003580)=""/21, 0x15}, {&(0x7f00000035c0)=""/26, 0x1a}, {&(0x7f0000003600)=""/130, 0x82}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/236, 0xec}, {&(0x7f00000047c0)=""/70, 0x46}, {&(0x7f0000004840)=""/60, 0x3c}, {&(0x7f0000004880)=""/4096, 0x1000}], 0xa, &(0x7f0000005940)=""/160, 0xa0}, 0x5}, {{&(0x7f0000005a00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000005b00)=[{&(0x7f0000005a80)=""/108, 0x6c}], 0x1}, 0x10000}, {{0x0, 0x0, &(0x7f0000007000)=[{&(0x7f0000005b40)=""/239, 0xef}, {&(0x7f0000005c40)=""/87, 0x57}, {&(0x7f0000005cc0)=""/197, 0xc5}, {&(0x7f0000005dc0)=""/44, 0x2c}, {&(0x7f0000005e00)=""/109, 0x6d}, {&(0x7f0000005e80)=""/255, 0xff}, {&(0x7f0000005f80)=""/4096, 0x1000}, {&(0x7f0000006f80)=""/113, 0x71}], 0x8, &(0x7f0000007080)=""/253, 0xfd}, 0x9}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000007180)=""/250, 0xfa}, {&(0x7f0000007280)=""/5, 0x5}, {&(0x7f00000072c0)=""/172, 0xac}, {&(0x7f0000007380)=""/100, 0x64}, {&(0x7f0000007400)=""/218, 0xda}, {&(0x7f0000007500)=""/44, 0x2c}, {&(0x7f0000007540)=""/188, 0xbc}, {&(0x7f0000007600)=""/194, 0xc2}, {&(0x7f0000007700)=""/88, 0x58}], 0x9, &(0x7f0000007840)=""/4096, 0x1000}}, {{&(0x7f0000008840)=@caif, 0x80, &(0x7f0000009dc0)=[{&(0x7f00000088c0)=""/151, 0x97}, {&(0x7f0000008980)=""/156, 0x9c}, {&(0x7f0000008a40)=""/124, 0x7c}, {&(0x7f0000008ac0)=""/108, 0x6c}, {&(0x7f0000008b40)=""/107, 0x6b}, {&(0x7f0000008bc0)=""/206, 0xce}, {&(0x7f0000008cc0)=""/4096, 0x1000}, {&(0x7f0000009cc0)=""/244, 0xf4}], 0x8, &(0x7f0000009e40)=""/154, 0x9a}, 0x8000}], 0x6, 0x2000, &(0x7f000000a080)={0x77359400}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f000000a140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000140)="2fea8deb0ecf1a2eaba5670819eae735e6e32feefd39de5d15fd68d1fd6c2df68fb5193ac3bdccb00b759875bbcc8f054a272511e2b7887f256c2d52d9e6368e800bd88aa486cde2d61a261f26b4d5aa0420ffc4dda72c7cc912f357643d791382f63dceee320dddb9dd1f23918f80890c4ced0f283dae86d56bfc53", 0x7c, r0}, 0x68) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000002400)=""/110) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f000000a280)={&(0x7f000000a1c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000a240)={&(0x7f000000a200)={0x38, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end={{}, {}, @device_b}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x13, 0xffffffffffffffff, 0x100000001) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800008, 0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/28) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x7, 0x1ff, 0xfffffffb, 0x3, 0x80000000, 0x6], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x2000)=nil}) 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x602) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000000}, 0x800) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff8000/0x1000)=nil, 0x3, 0x3, 0x41}) 06:45:36 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2c008010}, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x401, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000000)="4a090f22ae44bd87fb505d05d6a3d8ba5180a3dd0a47265ef7e596a709c5c24534249f9cd79f97fb3c161d47bd3e5b0449435ebf602ac8ce61bf3b439ba2083b751c35e2a89cd9090c0a1f8c317ab40b02760ce0ed1eaa4eb454087dc88d6fad7e4b3a251ab298ef60b9d29ff6a973ef8e12bee836fb25", 0x77}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)="37e6b63680d934ba1ba1553cc289f27b9d9aac6f60ba0edb7e846718d34b5f39e19a09fa62712fe42a8fd03a20dafdbe84d234459fa320fdb4168b0a008538c076fe02730705929a63513e04e69ac33490d291ebeab9acad2daee2b15aa256c8f385", 0x62, r0}, 0x68) 06:45:36 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x533142, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000003c0)={0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x80000001, 0x1, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e823b9a6d812d5c77d06513c7253314"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "f992551a2a48f4f7f060716187364fc8"}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048844}, 0x800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) shmget(0x2, 0x2000, 0x180, &(0x7f0000ffe000/0x2000)=nil) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x0) 06:45:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x66900) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x7ff, 0x8, 0x10001], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f00000000c0)={0x1f, 0xfb, 0x0, 0x7, 0x6, 0x1}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x1) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffd000/0x2000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000100)={0x0, 0x3c}) 06:45:36 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x2, 0x7, 0x0, 0xfff, 0xf96, 0xc6}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="14f3f9dbc7a91ea73948bc4626e819f4ab3056c660df19ac94581fd407c01c81fa1badd8f9ae6307f233d93a84276398aa223ba9b0e1747f71672b6cd5bdcd7c8d7eecf532e9c4895b492faf69d7b8d08d63c014769446eb859a0c", 0x5b}) fcntl$getown(r0, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ff7000/0x2000)=nil, 0x0) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0xffffffffffffffff) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x533142, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000003c0)={0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x80000001, 0x1, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e823b9a6d812d5c77d06513c7253314"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "f992551a2a48f4f7f060716187364fc8"}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048844}, 0x800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 06:45:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xd04, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x68b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}}, 0x40) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x10000000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x7fffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4) 06:45:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x533142, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000003c0)={0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x80000001, 0x1, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e823b9a6d812d5c77d06513c7253314"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "f992551a2a48f4f7f060716187364fc8"}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048844}, 0x800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x200000000000, 0x567800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x210000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)="ca6a7e31f0", 0x5, r1}, 0x68) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000005, 0x8010, r0, 0x87db4000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x248082, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000080)={&(0x7f0000000040)=[0x9], 0x1, 0x8, 0xafd8, 0x1fe, 0x4, 0x6, 0xfffffff8, {0x39, 0x5, 0x0, 0x1, 0x0, 0xffc0, 0x3, 0x7, 0xfff, 0x1000, 0x8, 0x3, 0x9, 0x2, "dd779e19b70991ecde7d8d5cabcb0bfaef578e9433b2326dfce322842731178c"}}) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r5) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000009f67c71e0ab1cd2f3fb619e56986c7645a965eef9d070dda78130975987de4667030985da657518a8de1f07df481a342f76037f5c0bb746578a86089c46e3f3abea5723da560ec66", @ANYRES16=r6, @ANYBLOB="010029bd70004edbdf252e00000008000200", @ANYRES32=r3, @ANYRES32], 0x58}}, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000003f0000000005001b000000000006000a0000010000"], 0x24}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010029bd70004edbdf252e00000008000200", @ANYRES32=r8, @ANYRES32], 0x58}}, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf25230000000800240003000000050022000100000008000200", @ANYRES32=r8, @ANYBLOB="050027000100000005002200000000000a0001007770616e300000000500280003000000"], 0x50}, 0x1, 0x0, 0x0, 0x200000c5}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x5555555555540204}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x511}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x7c}}, 0x8000) 06:45:36 executing program 1: munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x4], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f00000000c0)={0x4, 0x9, 0x7}) 06:45:36 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x533142, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000003c0)={0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x80000001, 0x1, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e823b9a6d812d5c77d06513c7253314"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "f992551a2a48f4f7f060716187364fc8"}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048844}, 0x800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4) 06:45:36 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) [ 996.319023] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 06:45:36 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x1000) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:36 executing program 4: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x3, 0x2, 0x40d, 0x1, 0x9, 0x1, 0x6, 0x0, 0x641], &(0x7f0000000040)=[0x0], 0x9, 0xfffffc00, 0xb0b0b0b0}) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) shmget(0x1, 0x1000, 0x78000000, &(0x7f0000ffd000/0x1000)=nil) 06:45:36 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x10000000) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x7fffffff, &(0x7f0000ffe000/0x2000)=nil, 0x4) [ 996.397845] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. 06:45:36 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:36 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xaecd6bf0e1d58903, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x40000000, 0xc7, 0x39}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={&(0x7f0000000280)=[0x1, 0x80000000, 0x8000, 0x1f, 0x9152], 0x5, 0x56f, 0x1, 0xffffa516, 0xed, 0x81, 0x8, {0x5, 0x7, 0x8, 0x3, 0x1, 0xfffc, 0x5, 0x5, 0x0, 0x0, 0x101, 0x8000, 0x0, 0x6, "9a031af9ca1e350bbee002a5d917cc3252a48e250515fbf60c29dfa1487cc89c"}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:36 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:36 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="8bda6102edc11d8184997b38345434557406c295ee413b9edbeec6d41b886957f3a2753f829e232bc0587973abdadbe89b8c69103d11d27c50821f370acf7276d5692b53", 0x44}, 0x68) 06:45:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xd04, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x68b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}}, 0x40) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0x3, 0x7, 0xffffa24b, 0x1ff], &(0x7f0000000080)=[0x0, 0x0], 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:37 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x2}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x208080, 0x0) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x3000)=nil) 06:45:37 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000000c0)={0x8a, 0x0, 0x9, 0x3f, &(0x7f0000000080)=""/63, 0xda, &(0x7f0000000180)=""/218, 0xdb, &(0x7f0000000280)=""/219}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8200, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r1, 0x6d294000) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) msync(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x5) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:37 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xd04, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x68b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}}, 0x40) 06:45:37 executing program 1: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6ed}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c001}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:37 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 06:45:37 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x420000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', 0xffffffffffffffff) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x24002) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x83000000) 06:45:37 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0xd04, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x68b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x2c}}, 0x40) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff], 0x1, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x4, {0x80000001, 0x100, 0xbd, 0x81, 0xf89, 0x0, 0x9, 0x9, 0x7fff, 0x1, 0xd3a5, 0x7f, 0x5, 0x8, "cc3481201a6ca93041ad644205837e4256296744899e94efc52b5385cc0d3f65"}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:37 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000d) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x2710, 0x0, &(0x7f00007fd000/0x800000)=nil}) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x8010, 0xffffffffffffffff, 0x0) 06:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}, 0x2}) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) 06:45:37 executing program 1: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x700}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0000c0}, 0x11) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000180)={0x4, 0x7, 0x39, 0x5, &(0x7f0000000140)=[{0x20, 0x224c, 0x80, 0x7f}, {0x928, 0x5, 0x2, 0x4}, {0x5, 0x3bc, 0x3, 0xff8e}, {0x9, 0x400, 0xfff8, 0x4}, {0x1, 0x1, 0x9, 0x3b09}]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:37 executing program 4: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x178, 0x0, 0x900, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x22}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x7, 0x38}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x34}}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd, 0x20}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x178}, 0x1, 0x0, 0x0, 0x44000}, 0x40804) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x224200, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r2, 0x53fb9000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 2: prctl$PR_SET_MM(0x23, 0xc, &(0x7f0000ffd000/0x2000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xce, 0x44041) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x20000000, 0x4, 0x35}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:37 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000004, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff6000/0xa000)=nil, 0x1000, 0x3000002, 0x11010, r1, 0x83000000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) read$proc_mixer(r4, &(0x7f0000000080)=""/130, 0x82) 06:45:37 executing program 4: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x240488c0}, 0x20044015) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250f00000008000500000000804000038008000300030000000600040008000000060004007f0000001400060000000000000000000000ffff00000000060007004e200000060007004e22000008000600001000003c00038008000500ffffffff140002007369743000000000000000000000000008000100000000001400060000000000000000000000ffffac14140e1c00028005000d000100000006000e004e20000008000400c90f0000"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x4000)=nil) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff3000/0x4000)=nil, 0x4000}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff1000/0xc000)=nil, 0xc000}, 0x2}) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4000010, r0, 0x401) 06:45:37 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x5, 0xfffffffa, 0x0, 0x3, 0x3], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x80, 0x0) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4010, r0, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/118) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) 06:45:37 executing program 2: pkey_alloc(0x0, 0x2) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffffffffffffff5b, 0x600200) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:37 executing program 3: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:37 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbfs(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x4009012, r0, 0x5) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1, 0x2000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="cdf91af16334247bc76134026cd3c0f10f29ceeb69b6532641e4d2f2354f861ee19c71f720b6e451e5ec71add9d34721065a09022341f287b61d8d30d689bd1ea3668c4312f5d8d700c51dbba4809799f76e30d5a6833b95d2c17a76041d840739fe1a98db95c37c5acae4b2df4361b147489974ff470c2f28cf74dc350d", 0x7e, r1}, 0x68) 06:45:37 executing program 3: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:37 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1000000000000, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:37 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffe000/0x1000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000140)={0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) 06:45:37 executing program 4: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:37 executing program 3: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:37 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x84000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 06:45:37 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:37 executing program 0: inotify_rm_watch(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) inotify_rm_watch(0xffffffffffffffff, 0x0) 06:45:37 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4000010, r0, 0x401) 06:45:37 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:37 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_alloc(0x0, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0xc, 0x80030, r0, 0x82000000) 06:45:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) 06:45:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r1) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4040080) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:38 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100, 0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000000)={0x7, 0x401, 0x3, 0xfffffffe, 0x0, 0x1}) 06:45:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4000010, r0, 0x401) 06:45:38 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 06:45:38 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x50, r0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x3, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000100)={0x80040, 0x2, &(0x7f0000000040)=[0x800, 0xa5e], &(0x7f0000000080)=[0x3a3, 0x0, 0x9, 0x6, 0x3a7d, 0x1000, 0x7ff], &(0x7f00000000c0)=[0x5]}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) 06:45:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x4000010, r0, 0x401) 06:45:38 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40041000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf25010000000000000009410000004c0018000000046574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b87dd34b9f63b2cc7923bbcc07af91b8eff8489f4166df8bdecc4e170c204ea78f4c61e130bfcbef7a2a4a5204ff4dc6cbd74c471a6ab76b736bc30687149a998b330b0b4d1d976647813e0519f9d8cb0daba30bde"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x109800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) socketpair(0x0, 0x6, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000000)) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:38 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:38 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:38 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x105842) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000180)={0x0, 0xffff, 0x8, 0x2, 0x2, 0x2, 0x7}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000080)={0x26, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x1a, 0x5, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x0) 06:45:38 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:38 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=[0x3f, 0xa48], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x100, 0x0, 0x85]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:38 executing program 1: r0 = pkey_alloc(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, r0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, r1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=r2, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x5}, 0x40) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:38 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:38 executing program 0: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000000)={0x0, 0x3}) 06:45:38 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x51cb2ace, 0x1, &(0x7f0000000000)=[{0x7ff, 0x8000, 0xb0ef, 0x52f6}]}) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) 06:45:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, 0x0) 06:45:38 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x80040, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000000)={0xf4}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x84, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6c}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x64, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x1e, 0x0, @random="9c3f48985942ba46ddea76d43e81f44f1b05faf4f3e888c67c8f"}, {0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="e62031c7c32d47d495ae7c"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0x4810) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x200000, 0x2) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 06:45:38 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x4000)=nil, 0x2000) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x1000)=nil, 0x2000) mmap$snddsp_control(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x2, 0x40010, 0xffffffffffffffff, 0x83000000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:38 executing program 2: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x4c200, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x2}) 06:45:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, 0x0) 06:45:38 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x61e081, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) fcntl$getown(r1, 0x9) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x9b197000) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 06:45:38 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff6000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/100) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, 0x0) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:38 executing program 1: ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000000)=""/213}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000200)={0x10000}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140)="f08cc0029ef2cb64156ccc74bae5fab528c424d6d1e75e1e94e09110431b129105d647410119810ab560910eb4c67a5335d24e02af68", 0x36}, 0x68) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000280)="c39396655379e6c4c1cf95274328a5c5bab3a3ea418d88f1884a90602b757f9b2bbee965ec452a5fdcddf113490a822839b4e48dd4a4d1575cbb2ffe8ac00e3446e7a8bd45dc2fe4cb5798d26710fd8fe609e219e1b5bea97965cb8ea8fc0920d2eb78422a4e4d65fd296e2b0d12c817fc934970b8a045e6339a38ea4629d1b1a93a502ccd74533d30ae04c815453bb83eb7964ff7d3a4", 0x97}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:38 executing program 2: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:38 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x840) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000000)) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x2000) 06:45:38 executing program 2: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x122000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 06:45:38 executing program 5: ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:38 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:38 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 5: ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:38 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:38 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x230, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7eb, 0x3d}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7f}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x20}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xa0, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x13, 0x1, @random="6fe0616dde31ee435e208889d696b7"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x22, 0x1, @random="72514be11433e40319c40b91479cf934036df2ea03413742dae2e7538b58"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x40000000}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="2b7a9e8781c5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x7fffffff}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xbc000000}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5cd8f1a}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x160, 0x2a, [@random_vendor={0xdd, 0xc2, "102efd6b8f204f8bbf4d59bcca26873712bfd8d67cf4f688d93d0be8c631529aec555ce1aba7079d0d7d108a39766cfb218deb8af95620b72f55b9582afbfbc2d61728e6985707f195493c8390664276eec25faf900c928284dd737050e7f43205f3fb56b06de95f667c7ea38a9607240254a074564f4b8f5d84d4869a55633c6d99e7a699af639ff8b56402f7b2f938881eeb9827c3826f244e07d6d8e1243eea0afae6d7ccb984299647cc1e33dbf9ebbdf3bff6f8a31b28a40db28ed799b8a446"}, @dsss={0x3, 0x1, 0xb2}, @measure_req={0x26, 0x85, {0xff, 0xb9, 0x7, "deb0a9f98097610e9f134f17d11d89d15096784a50c286ec521fd21a148d1107b1987d123666d4993c8742b599150b127b1593291f9688621cdfb79c6b7fea0b1905e5134d04df0814f77625a6cf68040f679dcb8c2b0e042f40a852543206d93a1a4746872ed4de4e36734db4bad8374b1ab7101075977c8171643cb835b6718252"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @mesh_chsw={0x76, 0x6, {0x0, 0x4, 0x33, 0x9}}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 06:45:38 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:38 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x596b9ede, 0x0, 0x85}) 06:45:38 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:38 executing program 1: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:38 executing program 5: ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x400040) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000240)={0x300, 0x9, &(0x7f0000000100)=[0xd1ad, 0xffffffc1, 0xfffff001, 0x45c9d3ff, 0x820, 0x0, 0xff, 0x10e, 0x9], &(0x7f0000000180)=[0x100, 0x8], &(0x7f00000001c0)=[0x5, 0x3f, 0x0, 0x3], &(0x7f0000000200)=[0x439, 0x5, 0x3900], 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0xfffffff9, 0x9, 0x6a, 0x72, 0x5, 0x5], 0x7, 0x5, 0x7fff, 0x1c0, 0x3, 0xe8, 0x0, {0x4, 0x8000, 0xc, 0x81, 0x0, 0x1000, 0x1, 0x5, 0x2, 0x8, 0x5, 0xdeb2, 0xffffffff, 0x3, "c2816573132e94a002e6836e5c35c23cea39f15a6fa0027e754e5de82c69a502"}}) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9, 0x1010, r0, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="92182356cde84a0fa5", 0x9, r0}, 0x68) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x0) 06:45:39 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffa000/0x3000)=nil) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000e, 0x13, 0xffffffffffffffff, 0x7e88a000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/105) 06:45:39 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x5, 0x4100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000000)={0x2, 0x6, 0x80000001, 0x5, 0xe875, 0x4, 0x13, 0x4, 0x1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}]}) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:39 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8, 0x50a01) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0x2) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:39 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = getpid() sched_rr_get_interval(r1, &(0x7f0000000040)) write$cgroup_pid(r0, &(0x7f0000000000)=r1, 0x12) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000000c0)=""/93) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:39 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e, 0x6ad, 0x20}) 06:45:39 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x218800, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x1, 0x56f, 0x3, 0x8, 0xb4a9, 0x3, 0x958d}) r1 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x9, 0x284240) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x101, 0xfff, 0x4}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000100)={0x10000000, 0x8000, 0xf}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/98) 06:45:39 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 1: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:39 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 3: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040014) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x8, 0x895, 0x8, 0xa9, 0xffff, 0x5, 0x67, 0x5, 0x3, 0xfff, 0x8d5}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1587}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xf7e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x78}}, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x40200) 06:45:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x6000) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x3, 0x0], 0x3, 0x800, 0x0, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ff6000/0x3000)=nil, 0x1000, 0x7, 0x13, r0, 0x83000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x4000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f00000001c0)="5ea097f46e0f92de866770e51fb31a662ee3e4f92f31580c88c511eea8f282a88cf5f0c6cce8e07637e05c009aa9e0f129453f7d3d76a91fe1fc12179b148870eb88cde837eee86163ec7d22a5e05d846ee8f21fcbe3b2b792438bccc03c712a747621b62a3598b7ff0059aa43bb600247a8716ce9b4f322f863caa80510a3a15ca76cdffd3e023d32dec8bff07980a1a6500707890456aab3168f93f29906273e7307244f3f56ca9fc0d670dead065cb360089458d550555b4f0b3f63d5d36b28731a4d5c1c7b0259a85fb55624ad1ddb1b765a22b133e99b169bf1a34bacd73c6df941e8", 0xe5, r1}, 0x68) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d(\x00@', @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900050000000500000008009e005409000034002d800a00000002020202020200000a000000010101010101000009000000031781454e0000000a0000000202020202020000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000480)={&(0x7f0000000400)="1accb304422e79eab54ca6159eac36e4a254fbf4aafeb4a5284a7f45a9b4c2aa28e693fdeaddbba7f93cab3ee82510a0606c03388e64029191a3d43bd279c498db88f6cc8d651d1c1070d10d012456e021cb02274bb7ca", 0x57}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:39 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x1384, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0xb}}}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x17, 0x2a, [@cf={0x4, 0x6, {0x2, 0x0, 0xfff8, 0xde}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x23c, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xffd}}, @ver_80211n={0x0, 0xff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x100000001, @default, 0x100, @void, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x29, 0x0, 0x3ac}}, @val={0x6, 0x2, 0x80}, @val={0x5, 0xf3, {0x63, 0xdd, 0x7f, "719ab346cecc22d498e78fb4c0d04d2693617170edb4a2a361f0bddc91d986a1eac2f71bc28e8b1d54cd0acd2aeaa9d3ad69265f298dda580f8ffc6090819a32e064d3677dc2fdb126f587f1418986a5bba4b1aca749f1e5503ebd0f8a18394713807738fa76068aad8e8745a1c5c916aa66c8e0848953efaf7eb9ff09d58b6621e899291cec89d598169af4ec393887e6bb239cc6356afc1d86f1f284989b51c5a8fa03bf0ec4293970c14bdb5a7115bb45151ccf0e817316b7dad3dfdfbab396e1ac7a811b2871c8c38ae1c622a1776403fd9e38859bf8bca440949233971f70e03bbda4847654b41b02dfa7ea1727"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0xf1, 0x64, 0x7}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc, "8d9bcc163edce96e2a627b21"}, {0xdd, 0xeb, "257c8f2557dbf954eea2eacc2b613be19627c53e060a39d7241856fc3e0ac96cde0b1869b6f33320732b5df06824b50c2427dedff30c6c2901bb9be8daa82e3397ef42a360a7d774057f5971f387a5bce8532f7e62a237c01c9f6004dff0c89b9862eddae8715fd0e9e62774243cb66e6a723ac9fb93f7e086a05bd9717d40898af034f7d1734454b0b753f11541be3446d26b44f0d260a00202c9be392c5ff4187b5d3b96fb4e15943c6f77525e5a45ba916e538baf1173d66e76b76abc5051508b4e49e93ae806c59a132ebc0905f61633922b84dd78a9874970e22fb3f49c4f4d2d1317369dd899f51c"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x10f4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x29, 0x2, "16954f26a82c21451b4fa30e21b69dbe2aa786f58c6c63b7a2d35307f394f8f8c1459899fe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbf, 0x3, "eb0a9181b041ff9f15db36ef7be2d487b0719e618be8ab49662a3174a4b11a3aa2c331f82016f84b7e2ba1e916eeb37c379445a7424ba12c4dcbbcc62d29e7bfba6e89ec296d25c5d1e7daa088bee7bbd2451d454d8c47234a6b921fabc5113a009824546907dfcdbac959879ecdca98cd4cb2b626cf790922e20905c645a8cfa95efc16bd9b812ca930ff2dce72bc050747fcc5909d79905681c6299f76fd78f5abbc36b7e2cf374e22c40001354e9df21f38aac381e6b0c21629"}]}]}, 0x1384}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) fcntl$getown(r0, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x6, 0x8a, 0xb813, 0x1c0, 0xffff0000, 0x1}) 06:45:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000ff4000/0xb000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x1ab55000) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r0, 0x82000000) 06:45:39 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget(0x2, 0x4000, 0x40, &(0x7f0000ffa000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000001, 0x100010, r0, 0x1000) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffc000/0x3000)=nil}) 06:45:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0xa000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) [ 999.345945] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, 0x0) 06:45:39 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x725f], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r1, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000080)={0x1, 0x100, 0xb, 0xf56, 0x400, 0xf1, 0x1000}) 06:45:39 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x3410c3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x539041, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x400, 0x0, 0x10001}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x9}, 0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x65) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 06:45:39 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r0, 0x82000000) 06:45:39 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x0, 0x0}) 06:45:39 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/216) 06:45:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000300)={0x1384, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0xb}}}}, [@NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x17, 0x2a, [@cf={0x4, 0x6, {0x2, 0x0, 0xfff8, 0xde}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_HEAD={0x23c, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @initial, {0x2, 0xffd}}, @ver_80211n={0x0, 0xff, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x100000001, @default, 0x100, @void, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x4, 0x29, 0x0, 0x3ac}}, @val={0x6, 0x2, 0x80}, @val={0x5, 0xf3, {0x63, 0xdd, 0x7f, "719ab346cecc22d498e78fb4c0d04d2693617170edb4a2a361f0bddc91d986a1eac2f71bc28e8b1d54cd0acd2aeaa9d3ad69265f298dda580f8ffc6090819a32e064d3677dc2fdb126f587f1418986a5bba4b1aca749f1e5503ebd0f8a18394713807738fa76068aad8e8745a1c5c916aa66c8e0848953efaf7eb9ff09d58b6621e899291cec89d598169af4ec393887e6bb239cc6356afc1d86f1f284989b51c5a8fa03bf0ec4293970c14bdb5a7115bb45151ccf0e817316b7dad3dfdfbab396e1ac7a811b2871c8c38ae1c622a1776403fd9e38859bf8bca440949233971f70e03bbda4847654b41b02dfa7ea1727"}}, @void, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0xf1, 0x64, 0x7}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xc, "8d9bcc163edce96e2a627b21"}, {0xdd, 0xeb, "257c8f2557dbf954eea2eacc2b613be19627c53e060a39d7241856fc3e0ac96cde0b1869b6f33320732b5df06824b50c2427dedff30c6c2901bb9be8daa82e3397ef42a360a7d774057f5971f387a5bce8532f7e62a237c01c9f6004dff0c89b9862eddae8715fd0e9e62774243cb66e6a723ac9fb93f7e086a05bd9717d40898af034f7d1734454b0b753f11541be3446d26b44f0d260a00202c9be392c5ff4187b5d3b96fb4e15943c6f77525e5a45ba916e538baf1173d66e76b76abc5051508b4e49e93ae806c59a132ebc0905f61633922b84dd78a9874970e22fb3f49c4f4d2d1317369dd899f51c"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x10f4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x29, 0x2, "16954f26a82c21451b4fa30e21b69dbe2aa786f58c6c63b7a2d35307f394f8f8c1459899fe"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbf, 0x3, "eb0a9181b041ff9f15db36ef7be2d487b0719e618be8ab49662a3174a4b11a3aa2c331f82016f84b7e2ba1e916eeb37c379445a7424ba12c4dcbbcc62d29e7bfba6e89ec296d25c5d1e7daa088bee7bbd2451d454d8c47234a6b921fabc5113a009824546907dfcdbac959879ecdca98cd4cb2b626cf790922e20905c645a8cfa95efc16bd9b812ca930ff2dce72bc050747fcc5909d79905681c6299f76fd78f5abbc36b7e2cf374e22c40001354e9df21f38aac381e6b0c21629"}]}]}, 0x1384}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) fcntl$getown(r0, 0x9) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xf) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000000)={0x5, 0x6, 0x8a, 0xb813, 0x1c0, 0xffff0000, 0x1}) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x5, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:40 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x6000) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$usbfs(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x8, 0x11, r0, 0x1f) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x6000) 06:45:40 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) [ 999.741134] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mmap$snddsp_status(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x82000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40c000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000ff9000/0x2000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf565ff33c15d0f96) 06:45:40 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x319, 0x1, 0x89}) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x7ff, 0x1, 0x50}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x600000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap$snddsp_control(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x4, 0x40010, r0, 0x83000000) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x6000) 06:45:40 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:40 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x83000000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:40 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 4: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 2: r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, r0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ff8000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffb000/0x1000)=nil) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 06:45:40 executing program 4: mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 2: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000000, 0x110, r0, 0x83000000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:40 executing program 0: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(r0, &(0x7f0000000100)) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x400000000, 0x0, 0x2}) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, &(0x7f00000000c0)={0x8001, r1}) 06:45:40 executing program 1: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 4: mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:40 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:40 executing program 4: mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:40 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x4000)=nil, 0x4000, &(0x7f0000000140)=""/100) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x80000, 0x0) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xe8, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x30d}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 06:45:40 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40800, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0xdc4e5dfa688dccfd, r1, 0x82000000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 06:45:40 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:40 executing program 4: mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/91) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ff9000/0x2000)=nil, 0x3) 06:45:41 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x9, 0x1010, r0, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0xffffffffffffffff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="92182356cde84a0fa5", 0x9, r0}, 0x68) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x100010, r0, 0x0) 06:45:41 executing program 4: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0x2000) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4008000) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff6000/0x3000)=nil, 0x3000, &(0x7f0000000140)=""/100) 06:45:41 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x9, &(0x7f00000000c0)=[0x2, 0x498d, 0xffff11fa, 0x9, 0x6, 0x7, 0x7, 0xe387, 0x1ff]}) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=[0x3f, 0xa48], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x100, 0x0, 0x85]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=[0x3f, 0xa48], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x100, 0x0, 0x85]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000000)={0xfff}) 06:45:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=[0x3f, 0xa48], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x100, 0x0, 0x85]}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x110, 0xffffffffffffffff, 0x85e4f000) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x200) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x20}, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:45:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000040)=[0x3f, 0xa48], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x100, 0x0, 0x85]}) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:41 executing program 1: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:41 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) 06:45:41 executing program 3: ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x8e8, 0x1, 0x6, 0x5, 0x8, 0x1, 0x9}) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff], 0x1, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x4, {0x80000001, 0x100, 0xbd, 0x81, 0xf89, 0x0, 0x9, 0x9, 0x7fff, 0x1, 0xd3a5, 0x7f, 0x5, 0x8, "cc3481201a6ca93041ad644205837e4256296744899e94efc52b5385cc0d3f65"}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:41 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 06:45:41 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff], 0x1, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x4, {0x80000001, 0x100, 0xbd, 0x81, 0xf89, 0x0, 0x9, 0x9, 0x7fff, 0x1, 0xd3a5, 0x7f, 0x5, 0x8, "cc3481201a6ca93041ad644205837e4256296744899e94efc52b5385cc0d3f65"}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:41 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:41 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 06:45:41 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 06:45:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff], 0x1, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x4, {0x80000001, 0x100, 0xbd, 0x81, 0xf89, 0x0, 0x9, 0x9, 0x7fff, 0x1, 0xd3a5, 0x7f, 0x5, 0x8, "cc3481201a6ca93041ad644205837e4256296744899e94efc52b5385cc0d3f65"}}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:42 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000fff000/0x1000)=nil) 06:45:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[0x7ff], 0x1, 0x2, 0x8, 0x9, 0x7f, 0x9, 0x4, {0x80000001, 0x100, 0xbd, 0x81, 0xf89, 0x0, 0x9, 0x9, 0x7fff, 0x1, 0xd3a5, 0x7f, 0x5, 0x8, "cc3481201a6ca93041ad644205837e4256296744899e94efc52b5385cc0d3f65"}}) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:42 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6ed}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c001}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:42 executing program 2: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x24280) 06:45:42 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6ed}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c001}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 2: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:42 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x24280) 06:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:42 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) msync(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x5) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:42 executing program 2: ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:42 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x24280) 06:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0xe3d], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8000, 0xd9d9d9d9}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) shmget(0x0, 0x4000, 0x400, &(0x7f0000ff6000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) 06:45:42 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) 06:45:42 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x24280) 06:45:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:42 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 06:45:42 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 06:45:42 executing program 1: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:42 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:42 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil}) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 06:45:42 executing program 1: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ff7000/0x2000)=nil, 0x0) 06:45:42 executing program 1: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 06:45:42 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ff7000/0x2000)=nil, 0x0) 06:45:42 executing program 4: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 06:45:42 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 06:45:42 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 06:45:42 executing program 4: prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ffb000/0x2000)=nil) 06:45:42 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, 0x0) 06:45:42 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:42 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x6, &(0x7f0000ff7000/0x2000)=nil, 0x0) 06:45:42 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:42 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 06:45:43 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x533142, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f00000003c0)={0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x801) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffc000/0x1000)=nil, 0x80000001, 0x1, 0x2}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_PMKID={0x14, 0x55, "4e823b9a6d812d5c77d06513c7253314"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2d}, @NL80211_ATTR_PMKID={0x14, 0x55, "f992551a2a48f4f7f060716187364fc8"}, @NL80211_ATTR_BSSID={0xa}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048844}, 0x800) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000400)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:43 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) 06:45:43 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ff8000/0x4000)=nil) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x0) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:43 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, 0x0) 06:45:43 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000c00000/0x400000)=nil, &(0x7f0000eac000/0x3000)=nil, &(0x7f0000cc3000/0x2000)=nil, &(0x7f0000fa0000/0x2000)=nil, &(0x7f0000ee2000/0x4000)=nil, &(0x7f0000f7c000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000cb5000/0x3000)=nil, &(0x7f0000f25000/0x3000)=nil, &(0x7f00000001c0)="5725e28a9144a6e9fa854941d33c0b5623470065c918281bbdc5318dee3c12503820c438e05095568b6736b1453c11bf8d2bac2c2cb31dd6b5359672e8b5376bd0f8414af12acebc1200a6b3ac4ca9e1f53abb9f479f17ca04674241abea919153e899d0056ec18c18bb816201593cc5077989cbcbf6f1c7391c45a67706825e2dcaa4028d", 0x85, r0}, 0x68) 06:45:43 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x8, 0x5], 0x3, 0x80000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff7000/0x3000)=nil, 0x2, 0x3, 0x5b}) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 3: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa) 06:45:43 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000100)=0xffffffff) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) 06:45:43 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x8, 0x5], 0x3, 0x80000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff7000/0x3000)=nil, 0x2, 0x3, 0x5b}) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 06:45:43 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/142}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x8, 0x5], 0x3, 0x80000}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff7000/0x3000)=nil, 0x2, 0x3, 0x5b}) 06:45:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 06:45:43 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/142}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, 0x0) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x8, 0x5], 0x3, 0x80000}) 06:45:43 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/142}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:45:43 executing program 4: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={0x0, &(0x7f0000000080)=""/142}) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:43 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) 06:45:43 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 1: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:45:43 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x1) 06:45:43 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 06:45:43 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:43 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:43 executing program 2: prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 06:45:43 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:43 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:43 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:43 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:43 executing program 2: mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) 06:45:44 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 3: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:44 executing program 2: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 0: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:44 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9, 0x10000) 06:45:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/214}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) 06:45:44 executing program 0: ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f00000000c0)={0xc000000, 0xfffffff8, 0x500, 0x8, 0x16, 0x2c}) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r0) 06:45:44 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:44 executing program 5: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 06:45:44 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 06:45:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/214}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) 06:45:44 executing program 4: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 06:45:44 executing program 5: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x20010, 0xffffffffffffffff, 0x69a7e000) 06:45:44 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 06:45:44 executing program 5: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 4: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/214}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r1) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x5, 0xe5, 0x1, 0xffffffff, 0xe4, 0x5, 0x4, 0x2}) 06:45:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8) 06:45:44 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r6, &(0x7f0000000180)=""/214}) [ 1004.254376] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:44 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x40010, 0xffffffffffffffff, 0xe000) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x88, 0x1, 0x7, 0x2, &(0x7f0000000040)=[{0x1, 0x3, 0x1, 0x9}, {0x3f, 0x3, 0x1, 0x2}]}) 06:45:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x5, 0xe5, 0x1, 0xffffffff, 0xe4, 0x5, 0x4, 0x2}) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) 06:45:44 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x40010, 0xffffffffffffffff, 0xe000) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x88, 0x1, 0x7, 0x2, &(0x7f0000000040)=[{0x1, 0x3, 0x1, 0x9}, {0x3f, 0x3, 0x1, 0x2}]}) 06:45:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) 06:45:44 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r2, 0xc02464bb, &(0x7f0000000040)={0x1, 0x5, 0xe5, 0x1, 0xffffffff, 0xe4, 0x5, 0x4, 0x2}) [ 1004.386793] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:44 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:44 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:44 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x40010, 0xffffffffffffffff, 0xe000) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000080)={0x88, 0x1, 0x7, 0x2, &(0x7f0000000040)=[{0x1, 0x3, 0x1, 0x9}, {0x3f, 0x3, 0x1, 0x2}]}) 06:45:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) 06:45:44 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) [ 1004.516466] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:45 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 06:45:45 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x40010, 0xffffffffffffffff, 0xe000) 06:45:45 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x0, 0x0}) 06:45:45 executing program 5: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) [ 1004.615275] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) 06:45:45 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:45 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 1: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x2, 0x3ff, 0x6, 0x1000003, 0x3, 0xe96b}) [ 1004.757165] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:45 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x2, 0x3ff, 0x6, 0x1000003, 0x3, 0xe96b}) 06:45:45 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) [ 1004.926895] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x7, 0x3, 0x81, 0x8000, 0x9, 0x3, 0x8}) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:45 executing program 0: munmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 1005.151990] [drm:drm_mode_legacy_fb_format] *ERROR* bad bpp, assuming x8r8g8b8 pixel format 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 5: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 06:45:45 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x5}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:45 executing program 3: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000003c0)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) get_mempolicy(&(0x7f0000000400), &(0x7f0000000440), 0x80000000, &(0x7f0000fff000/0x1000)=nil, 0x3) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000340)={0x3, 0x7}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 0: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 06:45:45 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:45 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:45 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:45 executing program 0: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 06:45:45 executing program 3: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:46 executing program 3: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) 06:45:46 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 3: munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) 06:45:46 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:46 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 5: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 4: syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 3: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffa000/0x3000)=nil) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, 0x0, 0x86000, 0x0) 06:45:46 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:45:46 executing program 0: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:46 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, 0x0, 0x86000, 0x0) 06:45:46 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x980000000000000, &(0x7f0000ffd000/0x1000)=nil, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x86000, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) 06:45:46 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffff001, 0x202003) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000009, 0x2010, r0, 0x6fdf) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) pkey_alloc(0x0, 0x2) 06:45:46 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:45:46 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, 0x0, 0x86000, 0x0) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) pkey_alloc(0x0, 0x2) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:45:46 executing program 1: r0 = socket(0x11, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) pkey_alloc(0x0, 0x2) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:46 executing program 1: r0 = socket(0x0, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:46 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:46 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:45:46 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) 06:45:46 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:46 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0xe000) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:47 executing program 1: r0 = socket(0x0, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:47 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 06:45:47 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) 06:45:47 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:47 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x402, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:47 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:47 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) 06:45:47 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:47 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 06:45:47 executing program 1: r0 = socket(0x0, 0x2, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:47 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={r4, 0x7, 0x214, 0x5, 0x1, 0x4, 0x4, 0x9, 0x9, 0x10000, 0x179}) 06:45:47 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 06:45:47 executing program 4: pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:47 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:47 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={r4, 0x7, 0x214, 0x5, 0x1, 0x4, 0x4, 0x9, 0x9, 0x10000, 0x179}) 06:45:47 executing program 1: r0 = socket(0x11, 0x0, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:47 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc814) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x4004891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x7, 0x0, 0x33, 0x8}, {0x6, 0xfb, 0xba}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640)='mptcp_pm\x00', 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:47 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:47 executing program 5: madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 06:45:47 executing program 1: r0 = socket(0x11, 0x0, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:47 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000080)={r4, 0x7, 0x214, 0x5, 0x1, 0x4, 0x4, 0x9, 0x9, 0x10000, 0x179}) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:47 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}}, 0x40080c4) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:47 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) [ 1007.075759] audit: type=1326 audit(1617000347.512:815): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30144 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 06:45:47 executing program 1: r0 = socket(0x11, 0x0, 0x40000) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:47 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:47 executing program 0: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:48 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc814) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x4004891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x7, 0x0, 0x33, 0x8}, {0x6, 0xfb, 0xba}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640)='mptcp_pm\x00', 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:48 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:48 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 06:45:48 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:48 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:48 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:48 executing program 5: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0xc814) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x4004891) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x7, 0x0, 0x33, 0x8}, {0x6, 0xfb, 0xba}]}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640)='mptcp_pm\x00', 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:48 executing program 1: socket(0x11, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:48 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:48 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) [ 1007.900276] audit: type=1326 audit(1617000348.342:816): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30185 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 06:45:48 executing program 1: socket(0x11, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:48 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) [ 1007.991124] audit: type=1326 audit(1617000348.432:817): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=30192 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x466459 code=0x0 06:45:49 executing program 4: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:49 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:49 executing program 1: socket(0x11, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}, 0x1}], 0x1, 0x10140, 0x0) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10140, 0x0) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:49 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10140, 0x0) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:49 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10140, 0x0) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) 06:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:49 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000180)={0x3, 0x80, 0x7}) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x10140, 0x0) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) 06:45:49 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$inet_tcp(0x2, 0x1, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000006, 0x1010, 0xffffffffffffffff, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1010c0, 0x0) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x10140, 0x0) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x10140, 0x0) 06:45:49 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:49 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, 0x0) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}}], 0x1, 0x10140, 0x0) 06:45:49 executing program 0: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x0, 0x10140, 0x0) 06:45:49 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:49 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x0, 0x80, 0x7}) 06:45:49 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:49 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3, r2}) 06:45:49 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0xffffffef}}], 0x1, 0x0, 0x0) 06:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)={0x0, 0x0, 0x7}) 06:45:50 executing program 2: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400}, 0x8001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3, r2}) 06:45:50 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 06:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000180)) 06:45:50 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000bb8000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) mmap$dsp(&(0x7f0000c1e000/0x4000)=nil, 0x4000, 0x6000009, 0x4010, r1, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x3, r2}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000bb8000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) mmap$dsp(&(0x7f0000c1e000/0x4000)=nil, 0x4000, 0x6000009, 0x4010, r1, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000100)={0x10002, 0x0, &(0x7f0000ffd000/0x3000)=nil}) 06:45:50 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000bb8000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) mmap$dsp(&(0x7f0000c1e000/0x4000)=nil, 0x4000, 0x6000009, 0x4010, r1, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xd899, 0x7ff, 0xae35, 0x6, 0x1, 0xfffffffa, 0x4128], 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:50 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000bb8000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:50 executing program 2: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) socket$inet6_tcp(0xa, 0x1, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 06:45:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 06:45:50 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:50 executing program 0: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) 06:45:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:50 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) 06:45:50 executing program 0: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:50 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:50 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:50 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:50 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) 06:45:51 executing program 2: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x108100, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0xa) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 0: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:51 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:51 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:51 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:51 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x100000000, 0x41) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:51 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 3: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:51 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) 06:45:51 executing program 3: mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/77) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:51 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 3: mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0xe7e, 0x0, 0x10000}) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:51 executing program 3: mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 06:45:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 06:45:51 executing program 3: mincore(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:51 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:51 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:51 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 06:45:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0) 06:45:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x0, 0x0, 0x10000}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r0}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)) 06:45:52 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000000)) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:52 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:52 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:52 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:52 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:52 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:52 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:52 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 3: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:53 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:53 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x0, 0x200}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4}) 06:45:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:53 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:53 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:53 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4}) 06:45:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:53 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x0, 0x200}) 06:45:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xa95, 0xffff, 0x42], 0x3, 0x80, 0x4, 0x7, 0x7, 0x20, 0x6, {0x10000, 0x100, 0x7ff, 0x1, 0x0, 0xffff, 0x101, 0x9, 0x7f, 0x6, 0x6, 0x6, 0x6, 0x5, "63fa44e6c335614b516709da335f559f2866dea728963e0d6168dda0dd02debf"}}) 06:45:54 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab}) 06:45:54 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001], &(0x7f0000000080)=[0x0, 0x0], 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:54 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab}) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001], &(0x7f0000000080)=[0x0, 0x0], 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:54 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:54 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x88900) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x7, 0x1, 0x8, 0x2, 0x7e, 0x3, 0x1, 0x69, 0xddf, 0x6, 0x5}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004180)) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab}) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001], &(0x7f0000000080)=[0x0, 0x0], 0x6) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) 06:45:54 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)={r1}) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) move_pages(r0, 0x3, &(0x7f0000000000)=[&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f0000000040)=[0x8001], &(0x7f0000000080)=[0x0, 0x0], 0x6) 06:45:54 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x0, 0x200}) 06:45:54 executing program 4: madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_rr_get_interval(r0, &(0x7f0000000040)) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x0, 0x200}) 06:45:54 executing program 4: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) shmget(0x3, 0x1000, 0x1a2, &(0x7f0000ffd000/0x1000)=nil) sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x0, 0x200}) 06:45:54 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000002, 0x4010, 0xffffffffffffffff, 0x82000000) sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4}) 06:45:54 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DURATION, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x24}}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfff, 0x414000) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000080)={0x57, 0xffffffff, 0x9, 0x4, 0xf, 0xffffffff}) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ff8000/0x2000)=nil) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r5, 0x0) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000fee000/0x12000)=nil, 0x6000) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) [ 1014.336201] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 06:45:54 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000400)=0x10) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:54 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:54 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 4: sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xd0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc0}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}]}, 0x38}, 0x1, 0x0, 0x0, 0x4005000}, 0x4800) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004) 06:45:54 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:54 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 06:45:54 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x500000d, 0x8010, r2, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x400, 0x1, 0x9}) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, &(0x7f0000000040)) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x500000d, 0x8010, r2, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x400, 0x1, 0x9}) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, 0x0) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x500000d, 0x8010, r2, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x400, 0x1, 0x9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, 0x0) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x500000d, 0x8010, r2, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 3: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) sched_rr_get_interval(0x0, 0x0) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x500000d, 0x8010, r2, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={r1, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x0, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/28) r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0xa5234619cebec3c2) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)={0xb8, r2, 0x8, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x28ba}, @IPVS_CMD_ATTR_DAEMON={0x14}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x29}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_SCHED_NAME={0x0, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv6=@private0={0xfc, 0x0, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x0, 0x9, 0x67}, @IPVS_SVC_ATTR_AF={0x0, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x0, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x93}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0xffffffffffffff8f, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4800}, 0xc851) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 3: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:55 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:55 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:55 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:55 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00', 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:55 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)) 06:45:56 executing program 4: ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000080)=r1) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:56 executing program 4: ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:56 executing program 4: ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 06:45:56 executing program 0: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 06:45:56 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0xffff, 0x0, 0x9, 0x9}]}) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:56 executing program 1: getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:56 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) shmget(0x1, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) 06:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000100)) 06:45:56 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:56 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 06:45:56 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:56 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4) 06:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:56 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x540, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) 06:45:56 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:56 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:56 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x540, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:56 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:56 executing program 4: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/238}) 06:45:56 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:56 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x540, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x81) 06:45:56 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:56 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:57 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) get_mempolicy(0x0, &(0x7f0000000040), 0x5, &(0x7f0000ffa000/0x3000)=nil, 0x0) 06:45:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 06:45:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x540, 0x0) 06:45:57 executing program 3: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000) 06:45:57 executing program 1: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x9, &(0x7f0000000280)=""/9}) 06:45:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 06:45:57 executing program 3: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) 06:45:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, 0x0) 06:45:57 executing program 2: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffa000/0x3000)=nil) mincore(&(0x7f0000ff8000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/100) mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x50, 0xffffffffffffffff, 0x20) 06:45:57 executing program 3: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 3: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 06:45:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000040)={0x0, 0x0}) 06:45:57 executing program 2: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) 06:45:57 executing program 0: ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:57 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0) 06:45:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x800, 0x7fff, 0xff, 0x7f], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 06:45:57 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f000000f540)={&(0x7f000000f480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000f500)={&(0x7f000000f4c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}}, 0xc040810) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:57 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0}) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000080)={0x0, r0}) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 06:45:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x800, 0x7fff, 0xff, 0x7f], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 06:45:57 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2}) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 06:45:57 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f000000f540)={&(0x7f000000f480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000f500)={&(0x7f000000f4c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}}, 0xc040810) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x800, 0x7fff, 0xff, 0x7f], 0x4, 0x800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 06:45:57 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 4: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f000000f540)={&(0x7f000000f480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000f500)={&(0x7f000000f4c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}}, 0xc040810) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x800, 0x7fff, 0xff, 0x7f], 0x4, 0x800}) 06:45:57 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:57 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:57 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) 06:45:57 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:57 executing program 5: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) 06:45:58 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) 06:45:58 executing program 0: syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000040)={0x55c2}) 06:45:58 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 1: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:45:58 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) 06:45:58 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:45:58 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/36) 06:45:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, 0x0) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 3: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:45:58 executing program 5: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:45:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) 06:45:58 executing program 2: munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) 06:45:58 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000040)={0x0, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 0: pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0xffffffffffffffff) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 06:45:58 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 06:45:58 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 1: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21f23d14000125bd7000fcdbdf252800000006000400a3aa000005002b0803000000774080c189d4cf688565f50c752496b3e439b18f0014a92316b7ffeabe74eae4adebdce8c471e10300d2aabce2c48f9298e47fb63241bdbb93aea2abdfd6e2b8c418fd7beec0109771230598924b865670783d5bf65821c47bfdd799c56745696bad9d5bdbf19ee2fcf13ff5c6200d0888249ebfebf88fc1ef2f9a93ac011c0ae9a0c878fea3843cfc816edc0f144560117c5ee79c25fa09e803f74ac3d7e6b7d2cba9074927"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8c0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) recvmmsg(r1, &(0x7f000000f100)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1, &(0x7f0000001f00)=""/130, 0x82}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/122, 0x7a}, {&(0x7f0000002100)=""/159, 0x9f}, {&(0x7f00000021c0)=""/39, 0x27}, {&(0x7f0000002200)=""/22, 0x16}, {&(0x7f0000002240)=""/215, 0xd7}], 0x6, &(0x7f00000023c0)=""/111, 0x6f}, 0x5f}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002440)=""/191, 0xbf}, {&(0x7f0000002500)=""/4096, 0x1000}], 0x2, &(0x7f0000003540)=""/182, 0xb6}, 0x2}, {{0x0, 0x0, &(0x7f0000005800)=[{&(0x7f0000003600)=""/62, 0x3e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)}, {&(0x7f0000004680)=""/10, 0xa}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/125, 0x7d}, {&(0x7f0000005740)=""/185, 0xb9}], 0x7, &(0x7f0000005880)=""/117, 0x75}, 0x7}, {{&(0x7f0000005900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000005980)=""/167, 0xa7}, {&(0x7f0000005a40)=""/179, 0xb3}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/157, 0x9d}, {&(0x7f0000006bc0)=""/146, 0x92}, {&(0x7f0000006c80)=""/65, 0x41}, {&(0x7f0000006d00)=""/227, 0xe3}], 0x7, &(0x7f0000006e80)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000007e80)=@can, 0x80, &(0x7f000000b280)=[{&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}, {&(0x7f0000009f00)=""/168, 0xa8}, {&(0x7f0000009fc0)=""/192, 0xc0}, {&(0x7f000000a080)=""/195, 0xc3}, {&(0x7f000000a180)=""/4096, 0x1000}, {&(0x7f000000b180)=""/241, 0xf1}], 0x7}, 0x7}, {{&(0x7f000000b300)=@ethernet={0x0, @local}, 0x80, &(0x7f000000c680)=[{&(0x7f000000b380)=""/117, 0x75}, {&(0x7f000000b400)=""/4096, 0x1000}, {&(0x7f000000c400)=""/117, 0x75}, {&(0x7f000000c480)=""/48, 0x30}, {&(0x7f000000c4c0)=""/208, 0xd0}, {&(0x7f000000c5c0)=""/120, 0x78}, {&(0x7f000000c640)=""/58, 0x3a}], 0x7, &(0x7f000000c700)=""/169, 0xa9}, 0x1}, {{&(0x7f000000c7c0)=@xdp, 0x80, &(0x7f000000dc80)=[{&(0x7f000000c840)=""/175, 0xaf}, {&(0x7f000000c900)=""/119, 0x77}, {&(0x7f000000c980)=""/98, 0x62}, {&(0x7f000000ca00)=""/4096, 0x1000}, {&(0x7f000000da00)=""/217, 0xd9}, {&(0x7f000000db00)=""/227, 0xe3}, {&(0x7f000000dc00)=""/81, 0x51}], 0x7}, 0x5}, {{&(0x7f000000dd00)=@sco={0x1f, @fixed}, 0x80, &(0x7f000000f040)=[{&(0x7f000000dd80)=""/100, 0x64}, {&(0x7f000000de00)=""/176, 0xb0}, {&(0x7f000000dec0)=""/164, 0xa4}, {&(0x7f000000df80)=""/4096, 0x1000}, {&(0x7f000000ef80)=""/172, 0xac}], 0x5, &(0x7f000000f0c0)=""/38, 0x26}, 0x6}], 0x9, 0x1, &(0x7f000000f340)={0x0, 0x989680}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x9f0, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x656, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2830}, @device_a, @broadcast, @random="77863a2a44c0", {0x5, 0x9}}, 0x100000000, @default, 0x8008, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x1}, {0x16, 0x1}, {0x12}, {0x6c, 0x1}, {0x9, 0x1}, {0x30, 0x1}, {0x24, 0x1}]}, @void, @val={0x4, 0x6, {0x8, 0x1f, 0x1f, 0x1f}}, @val={0x6, 0x2, 0x8}, @void, @val={0x25, 0x3, {0x0, 0xb7, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x37, 0xf, 0x4}}, [{0xdd, 0xd2, "a9db8436163dc816a165fe108dfc3a942401a611bd3615bbc43861c9bff11fe0696580909beefd365ef83572a4d4d8cd7524f500cf975bfea88860b2f8761e89ac2669f7e5a9e1c2d5cb8f1a4ffbd7435c01b17dc174c6d0b05bb549c40127f6938e25c5ff38d5811d1c7f4623f13659d0e5268a686728c85507432b0d099db761e04c8f72e7df212cbef92153ab32c7f6ea8983fe7561739708072c72865a3763019c0c4d5679b555e4902468c8b4bc695ecaa43dfe9a56e4d4d844c0a7585b9b2260eb157049891c0c6016e810902ebfa6"}, {0xdd, 0x87, "07610765cdcada3ff537c6d162ec8257d94ce54f798e737e71f73ae1179637e212c2be5cc38aac0294565ed8c59fae1aa17ef7dbbbb2a47364bd8d2c801dea1df6a3b3ba8ddd2b171e024006f62b361c1fb99e1caaf46ac7592e3d45861acc81882f069690a049c6ec93ebffe715316b6ce86a0983305d6d4b61b99cb779e817c59d1d7bfb4579"}, {0xdd, 0xc7, "325d0cbefba2feec45da7a9f098bba7f01f7bfc8b24e15517e6a400a05d92b9db93f476c60b4ad2701265654e92c4c4a37cadffefce2e1098ebc1e703120e884767f385caa45601a90c4492a1ce1a64ef10883de2be4e90ad0490442b368ea9d573ae73121ebf01ed2062d9a5f09d018247924fa17b0bd038a8ab184ac4bcd6ba4044cff773945dbc87e85e610d487f399ce181c11a6f23733554f8cbfe4a3da86263a37f336d9d25cff0678056f99ca847500b09c44dda357fb959d6c643407592632a4b990e5"}, {0xdd, 0xb1, "fc9da0dc012ad5cd0e2f43bfc0f592966f5c09ddd31d398df230d1449f468850e525cebb55428f182a3e540c17678dbe3b35327adf010b9520ee9025dfdb3e827a0cd375dc3b5634041d7c31b8bab07e3b435efaaa9ae866775063a04c4cb0769fb3afdab2f813dd35483bf810abcf8a86094c5f4bd6f75d33d6e4a5c4a4df5a4b39bf2cf72ce07730b61e1e0c31caeb7992ef1e089ce17f2d49de63ba6a27edc94a65a49e436d3d6171998813b874da4a"}, {0xdd, 0xed, "a7887905c5b36cfe90df2f4983d2d8587d94618e8dcffded9bb872d186b159972ebf569a6a24696720a88c18e573f487996044e5f1df75f2d130b730d74a38adc8f565a7d6ecc50d8e67c0635bab857df563c6ff520d78c1f2ed8abcc5d7dd9514c7fb37b990861d0ca5440b25e2db7bd50dfe51242912e4075da24cda91276212b31a55b7d959f58b0e424871dfa897376c2e8bb30b0b87c99396cb60a623f1781d424c5f3b399cea56d65b72a60bb828e8e06e8143d1eccf52e24017e9799b6d9ef7faf266b3a8e17bb452bae47698c10472aed71beda943e120dba0c5db665e2a8aed352c581c0b510b458b"}, {0xdd, 0x78, "9d0993a148df98f4b438d568f8cf2491425783b5a9c22646af15deca2f3385f3b4de525903c2964e081f9b4eb9b4f3c0dcf41399eb38155e072c7dbcfca292ffe520c7da7995085271f0f1915b98dcdf25f09a2b1613ca6510a436e5ca375409c5ec6e89a1ed9d831018f171e808f753e8996712fec947bd"}, {0xdd, 0xd9, "10a3d6ac6589ad961354ca36795440fb9498e4c77e555b3439881860ecb6635da8c4e001c12d96281b05531e3699e209d8e5de43dd9e9192612f6d9cf1adb88e93690082251b4dea507ca3fbfa917ded46b87c83ded56276d29e5288703258a2c865e5a4cfddfdb622394773ca0f6e3aef87ed5e5599cc9a939c6841cd8582649ae7733bb8a2b45e8f0ab25e10d6bbcf4689ea7cc844856f0bf1ab80e44065ae751ca7a9d78a5635b8fde5bb37f17fa065d47c93d1c9ab3c862fe7675af2e779e78778e1eaecbd6b44500956218fd218f64eecc09a9cc7a0f5"}, {0xdd, 0xb, "c2bd99debbdbc13d7b2293"}, {0xdd, 0xd5, "b09bde1e847e813e71a1fb913ff1343c0eec2e623f627444c06075e74a28f4e2fcb6e3760f8cf2c1fc6ddb24e0480038bd325721e158e0088d6c60df99402618fe0a321c6d9435f3fd8dcab6923dfe07cb60ac9d594665836b5b38406491e56fa82e8ede3774536a479697ed1785a4e103c0079fd688122993f858ebd4b39afcb03690ced5a47d5a8c48b682f8536dfb923cffd952b7acce308496c1c8574d9ea7f00b601c4ec4400b65b4d5e501beca444e4967ad1742ed94a2a5b024f3f14fc3984f3623a5c55e954217758250281fb18e9cb3a6"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x73, 0x80, [@tim={0x5, 0x6d, {0x1f, 0xe1, 0x3f, "739a18a3796c965da43068e8d5bc4caefb9201d68a00537fd2a548d7bdc4f74bf4fd4faeb5c46455dae498f5f6d35cf44dfd8d1b2937813c69fbe4132cf75abe0ff3cb899554fc52fbecbac196400fa4471372b479e46c915179c55739e3631ad753525e6c480653b725"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x29c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd6, 0x3, "a87790afb665cb494948182a17ad1f45832bd96e187c15489a6a20f7f0124db3200d3cb25d9dedf42c7e685d5c4d754dab1359c119c8d6e1e32a9d8a120e2327542a87ba3b989dc3eeb0b8c4c3318102c0367e62c63edfc655f4cfbf7073780726f79244d834cba7d9eb0aab026520152ca4896f937c9d0bed965a48a99fae2170cff67de4ea172da0acaa8de81b82f47406b553cfb9fc1d43e1a18ef634dbe3143b5a9455a08c13aa071d7e33d7ddd5085d46bd79fce9ca9462232a48952e01176ac8dd5e2d4fdcc7e515940a226efad43f"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x95, 0x3, "27ea1a7555ef981a9be1df199003cd3d26ce4e75b65f8e247f756308d4c2829e56d491d00e439893a95959edd8d2b1b027030fefcef0a68efa9c598c6599dcdad63c0a1497f2d1ff8d846397a16f9df6a07b73ae6351f2e7f446263abc90b95b88617265eb2604088aa91b2422c5662f2849ae09e64b4f87b93a992fe9c977d538421bff5a5a1f988764178123cedeb64e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "4cbac0f4437b6803a04c564697f4b9e71868999f1cac9255f0c399658bcd3f617678bd6e9e6def4a337b64edb5f29cf067f632d1f9a11821aa3486ce35309be5ffd6058a1e2ca5d7b0b96f65b3c14b4d5f26307df84b15af8f9defad6d3e9d"}, @NL80211_FTM_RESP_ATTR_LCI={0x17, 0x2, "7db385de3042532685e263794c14984420794e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa6, 0x3, "0cf769496252f74cb09cc41b6818e1607903b0a01074e9209c25f738560decbfdb3951aaf0cf86370a0e486e7a93f53fabeb59c87f963f03d1664b5959bbe696a704de180b3cf252a8675c7a8c26a50b3a92b414ac24e8eb4be2112ed2eb636436e7f47cae5a98a8e79453d63769e0062ee1a62a4d6bd0b6d1bac0d5274ea805899f9968aaa77482dd7fb7caabb7a81a22e1105454cc2075bee13fb8dcfe05d28684"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1b, 0x80, [@rann={0x7e, 0x15, {{0x0, 0x44}, 0x80, 0x20, @device_a, 0x5, 0x1000, 0x3}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x58, 0x7f, [@cf={0x4, 0x6, {0x40, 0x3, 0x8, 0x4}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1d, 0x99, 0x5}}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0xff, @device_b, 0x4, "", 0x401, 0x5, @device_a, 0x4}}, @challenge={0x10, 0x1, 0x5b}, @perr={0x84, 0xf, {0x81, 0x1, [@not_ext={{}, @device_b, 0x2, "", 0x2c}]}}, @supported_rates={0x1, 0x5, [{0x18, 0x1}, {0x1}, {0x36, 0x1}, {0x12}, {0x30}]}, @supported_rates={0x1, 0x8, [{0x6}, {0x30}, {0x9}, {0x30, 0x1}, {0x5}, {0x24, 0x1}, {0x1b}, {0x30, 0x1}]}]}]}, 0x9f0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f000000f540)={&(0x7f000000f480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000f500)={&(0x7f000000f4c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x19}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x7}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}}, 0xc040810) sendmsg$IEEE802154_START_REQ(r3, &(0x7f000000f440)={&(0x7f0000004640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000f400)={&(0x7f000000f380)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x4}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x80}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_BAT_EXT={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x4000001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x3a) get_mempolicy(&(0x7f0000000e40), &(0x7f0000000e80), 0x8, &(0x7f0000ffb000/0x3000)=nil, 0x3) 06:45:58 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 4: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 1 (fault-call:0 fault-nth:0): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:45:58 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:58 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:58 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1018.504040] FAULT_INJECTION: forcing a failure. [ 1018.504040] name failslab, interval 1, probability 0, space 0, times 0 06:45:59 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:45:59 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) [ 1018.549044] CPU: 0 PID: 31460 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1018.557002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.566367] Call Trace: [ 1018.568971] dump_stack+0x1b2/0x281 [ 1018.572611] should_fail.cold+0x10a/0x149 [ 1018.576783] should_failslab+0xd6/0x130 [ 1018.580775] kmem_cache_alloc+0x28e/0x3c0 [ 1018.584939] getname_flags+0xc8/0x550 [ 1018.588756] do_sys_open+0x1ce/0x410 [ 1018.592482] ? filp_open+0x60/0x60 06:45:59 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) [ 1018.596039] ? __do_page_fault+0x159/0xad0 [ 1018.600288] ? do_syscall_64+0x4c/0x640 [ 1018.604296] ? SyS_open+0x30/0x30 [ 1018.607767] do_syscall_64+0x1d5/0x640 [ 1018.611676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1018.616881] RIP: 0033:0x466459 [ 1018.620074] RSP: 002b:00007ffadcb66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1018.627823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1018.635109] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c 06:45:59 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 2: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) [ 1018.642394] RBP: 00007ffadcb661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.650719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.657998] R13: 00007ffc3c5c2abf R14: 00007ffadcb66300 R15: 0000000000022000 06:45:59 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 1 (fault-call:0 fault-nth:1): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:45:59 executing program 5: prctl$PR_SET_MM(0x23, 0xd, &(0x7f0000ffd000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1018.857714] FAULT_INJECTION: forcing a failure. [ 1018.857714] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.907450] CPU: 0 PID: 31496 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1018.915381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1018.924753] Call Trace: [ 1018.927355] dump_stack+0x1b2/0x281 [ 1018.930992] should_fail.cold+0x10a/0x149 [ 1018.935158] should_failslab+0xd6/0x130 [ 1018.939250] kmem_cache_alloc+0x28e/0x3c0 [ 1018.943413] get_empty_filp+0x86/0x3e0 [ 1018.947308] path_openat+0x84/0x2970 [ 1018.951056] ? get_pid_task+0x91/0x130 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1018.954971] ? path_lookupat+0x780/0x780 [ 1018.959068] ? trace_hardirqs_on+0x10/0x10 [ 1018.963327] do_filp_open+0x179/0x3c0 [ 1018.967135] ? may_open_dev+0xe0/0xe0 [ 1018.970948] ? __alloc_fd+0x1be/0x490 [ 1018.974762] ? lock_downgrade+0x740/0x740 [ 1018.978922] ? do_raw_spin_unlock+0x164/0x220 [ 1018.983427] ? _raw_spin_unlock+0x29/0x40 [ 1018.987587] ? __alloc_fd+0x1be/0x490 [ 1018.991411] do_sys_open+0x296/0x410 [ 1018.995146] ? filp_open+0x60/0x60 [ 1018.998702] ? __do_page_fault+0x159/0xad0 [ 1019.002950] ? do_syscall_64+0x4c/0x640 06:45:59 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1019.006938] ? SyS_open+0x30/0x30 [ 1019.010429] do_syscall_64+0x1d5/0x640 [ 1019.014335] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1019.019546] RIP: 0033:0x466459 [ 1019.022761] RSP: 002b:00007ffadcb66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1019.030471] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1019.037749] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1019.045031] RBP: 00007ffadcb661d0 R08: 0000000000000000 R09: 0000000000000000 06:45:59 executing program 3 (fault-call:0 fault-nth:0): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1019.052308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.059587] R13: 00007ffc3c5c2abf R14: 00007ffadcb66300 R15: 0000000000022000 [ 1019.116322] FAULT_INJECTION: forcing a failure. [ 1019.116322] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.141704] CPU: 0 PID: 31515 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 1019.149868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.159243] Call Trace: [ 1019.161850] dump_stack+0x1b2/0x281 [ 1019.165528] should_fail.cold+0x10a/0x149 [ 1019.169693] should_failslab+0xd6/0x130 [ 1019.173684] kmem_cache_alloc+0x28e/0x3c0 [ 1019.177849] __split_vma+0xc8/0x6c0 [ 1019.181490] do_munmap+0x25b/0xc30 [ 1019.185045] mmap_region+0x217/0x1220 [ 1019.188866] do_mmap+0x5b3/0xcb0 [ 1019.192244] vm_mmap_pgoff+0x14e/0x1a0 [ 1019.196147] ? vma_is_stack_for_current+0xb0/0xb0 [ 1019.201182] SyS_mmap_pgoff+0x3c5/0x510 [ 1019.205155] ? find_mergeable_anon_vma+0x230/0x230 [ 1019.210088] ? __do_page_fault+0x159/0xad0 [ 1019.214329] ? do_syscall_64+0x4c/0x640 [ 1019.218302] ? align_vdso_addr+0x250/0x250 [ 1019.222535] do_syscall_64+0x1d5/0x640 [ 1019.226422] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1019.231609] RIP: 0033:0x466459 [ 1019.234830] RSP: 002b:00007f5b50b4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1019.242555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1019.249823] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1019.257105] RBP: 00007f5b50b4e1d0 R08: ffffffffffffffff R09: 0000000082000000 06:45:59 executing program 1 (fault-call:0 fault-nth:2): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:45:59 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 3 (fault-call:0 fault-nth:1): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1019.264505] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1019.271783] R13: 00007ffc98c802ff R14: 00007f5b50b4e300 R15: 0000000000022000 06:45:59 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1019.348591] FAULT_INJECTION: forcing a failure. [ 1019.348591] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.374478] FAULT_INJECTION: forcing a failure. [ 1019.374478] name failslab, interval 1, probability 0, space 0, times 0 06:45:59 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:45:59 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1019.417073] CPU: 0 PID: 31529 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1019.425135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.434496] Call Trace: [ 1019.437102] dump_stack+0x1b2/0x281 [ 1019.440751] should_fail.cold+0x10a/0x149 [ 1019.444918] should_failslab+0xd6/0x130 [ 1019.448906] kmem_cache_alloc+0x28e/0x3c0 [ 1019.453101] get_empty_filp+0x86/0x3e0 [ 1019.457026] path_openat+0x84/0x2970 [ 1019.460744] ? get_pid_task+0x91/0x130 [ 1019.464654] ? path_lookupat+0x780/0x780 [ 1019.468729] ? trace_hardirqs_on+0x10/0x10 [ 1019.472988] do_filp_open+0x179/0x3c0 [ 1019.476800] ? may_open_dev+0xe0/0xe0 [ 1019.480610] ? __alloc_fd+0x1be/0x490 [ 1019.484421] ? lock_downgrade+0x740/0x740 [ 1019.488609] ? do_raw_spin_unlock+0x164/0x220 [ 1019.493125] ? _raw_spin_unlock+0x29/0x40 [ 1019.497323] ? __alloc_fd+0x1be/0x490 [ 1019.501137] do_sys_open+0x296/0x410 [ 1019.504861] ? filp_open+0x60/0x60 [ 1019.508446] ? __do_page_fault+0x159/0xad0 [ 1019.512698] ? do_syscall_64+0x4c/0x640 [ 1019.516676] ? SyS_open+0x30/0x30 [ 1019.520137] do_syscall_64+0x1d5/0x640 [ 1019.524065] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1019.529265] RIP: 0033:0x466459 [ 1019.532453] RSP: 002b:00007ffadcb66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1019.540253] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1019.547526] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1019.554813] RBP: 00007ffadcb661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.562083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.569360] R13: 00007ffc3c5c2abf R14: 00007ffadcb66300 R15: 0000000000022000 [ 1019.576675] CPU: 1 PID: 31533 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 1019.584608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.593970] Call Trace: [ 1019.596578] dump_stack+0x1b2/0x281 [ 1019.600254] should_fail.cold+0x10a/0x149 [ 1019.604430] should_failslab+0xd6/0x130 [ 1019.608430] kmem_cache_alloc+0x28e/0x3c0 [ 1019.612598] __split_vma+0xc8/0x6c0 [ 1019.616243] do_munmap+0x2bc/0xc30 [ 1019.619840] mmap_region+0x217/0x1220 [ 1019.623670] do_mmap+0x5b3/0xcb0 [ 1019.627047] vm_mmap_pgoff+0x14e/0x1a0 [ 1019.630945] ? vma_is_stack_for_current+0xb0/0xb0 [ 1019.635809] SyS_mmap_pgoff+0x3c5/0x510 [ 1019.639789] ? find_mergeable_anon_vma+0x230/0x230 [ 1019.644728] ? __do_page_fault+0x159/0xad0 [ 1019.649078] ? do_syscall_64+0x4c/0x640 [ 1019.653247] ? align_vdso_addr+0x250/0x250 [ 1019.657544] do_syscall_64+0x1d5/0x640 [ 1019.661459] entry_SYSCALL_64_after_hwframe+0x46/0xbb 06:46:00 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 1 (fault-call:0 fault-nth:3): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:00 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1019.666674] RIP: 0033:0x466459 [ 1019.669875] RSP: 002b:00007f5b50b4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1019.677598] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1019.685141] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1019.692425] RBP: 00007f5b50b4e1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1019.699708] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1019.706987] R13: 00007ffc98c802ff R14: 00007f5b50b4e300 R15: 0000000000022000 06:46:00 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1019.782732] FAULT_INJECTION: forcing a failure. [ 1019.782732] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.794518] CPU: 1 PID: 31563 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1019.802426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1019.811789] Call Trace: [ 1019.814399] dump_stack+0x1b2/0x281 [ 1019.818047] should_fail.cold+0x10a/0x149 [ 1019.822216] should_failslab+0xd6/0x130 [ 1019.826237] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1019.830927] apparmor_file_alloc_security+0x129/0x800 [ 1019.836140] security_file_alloc+0x66/0xa0 [ 1019.840394] ? selinux_is_enabled+0x5/0x50 [ 1019.844646] get_empty_filp+0x15c/0x3e0 [ 1019.848634] path_openat+0x84/0x2970 [ 1019.852365] ? get_pid_task+0x91/0x130 [ 1019.856278] ? path_lookupat+0x780/0x780 [ 1019.860386] ? trace_hardirqs_on+0x10/0x10 [ 1019.864646] do_filp_open+0x179/0x3c0 [ 1019.868579] ? may_open_dev+0xe0/0xe0 [ 1019.872397] ? __alloc_fd+0x1be/0x490 [ 1019.876210] ? lock_downgrade+0x740/0x740 [ 1019.880371] ? do_raw_spin_unlock+0x164/0x220 [ 1019.884883] ? _raw_spin_unlock+0x29/0x40 [ 1019.889036] ? __alloc_fd+0x1be/0x490 [ 1019.893275] do_sys_open+0x296/0x410 [ 1019.897007] ? filp_open+0x60/0x60 [ 1019.900556] ? __do_page_fault+0x159/0xad0 [ 1019.904783] ? do_syscall_64+0x4c/0x640 [ 1019.908744] ? SyS_open+0x30/0x30 [ 1019.912194] do_syscall_64+0x1d5/0x640 [ 1019.916102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1019.921296] RIP: 0033:0x466459 [ 1019.924485] RSP: 002b:00007ffadcb66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 06:46:00 executing program 3 (fault-call:0 fault-nth:2): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 1 (fault-call:0 fault-nth:4): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1019.932191] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1019.939515] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1019.946794] RBP: 00007ffadcb661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.954057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.961320] R13: 00007ffc3c5c2abf R14: 00007ffadcb66300 R15: 0000000000022000 06:46:00 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 2 (fault-call:0 fault-nth:0): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1020.066493] FAULT_INJECTION: forcing a failure. [ 1020.066493] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.075549] FAULT_INJECTION: forcing a failure. [ 1020.075549] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.092398] FAULT_INJECTION: forcing a failure. [ 1020.092398] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.125232] CPU: 1 PID: 31588 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 1020.133169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.142534] Call Trace: [ 1020.145133] dump_stack+0x1b2/0x281 [ 1020.148787] should_fail.cold+0x10a/0x149 [ 1020.152945] should_failslab+0xd6/0x130 [ 1020.156951] kmem_cache_alloc+0x28e/0x3c0 [ 1020.161108] mmap_region+0x7c1/0x1220 [ 1020.164921] do_mmap+0x5b3/0xcb0 [ 1020.168318] vm_mmap_pgoff+0x14e/0x1a0 [ 1020.172218] ? vma_is_stack_for_current+0xb0/0xb0 [ 1020.177206] SyS_mmap_pgoff+0x3c5/0x510 [ 1020.181195] ? find_mergeable_anon_vma+0x230/0x230 [ 1020.186170] ? __do_page_fault+0x159/0xad0 [ 1020.190418] ? do_syscall_64+0x4c/0x640 [ 1020.194405] ? align_vdso_addr+0x250/0x250 [ 1020.198659] do_syscall_64+0x1d5/0x640 [ 1020.202590] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.207797] RIP: 0033:0x466459 [ 1020.210992] RSP: 002b:00007f5b50b4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1020.218709] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 06:46:00 executing program 5 (fault-call:0 fault-nth:0): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1020.225984] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1020.233270] RBP: 00007f5b50b4e1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1020.240556] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1020.247892] R13: 00007ffc98c802ff R14: 00007f5b50b4e300 R15: 0000000000022000 [ 1020.286109] CPU: 0 PID: 31591 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1020.294043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.302698] FAULT_INJECTION: forcing a failure. [ 1020.302698] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.303398] Call Trace: [ 1020.303417] dump_stack+0x1b2/0x281 [ 1020.303430] should_fail.cold+0x10a/0x149 [ 1020.303450] should_failslab+0xd6/0x130 [ 1020.329057] kmem_cache_alloc+0x28e/0x3c0 [ 1020.333233] __split_vma+0xc8/0x6c0 [ 1020.337242] do_munmap+0x25b/0xc30 [ 1020.340807] mmap_region+0x217/0x1220 [ 1020.344624] do_mmap+0x5b3/0xcb0 [ 1020.348007] vm_mmap_pgoff+0x14e/0x1a0 [ 1020.351911] ? vma_is_stack_for_current+0xb0/0xb0 [ 1020.356879] SyS_mmap_pgoff+0x3c5/0x510 [ 1020.360907] ? find_mergeable_anon_vma+0x230/0x230 [ 1020.365847] ? __do_page_fault+0x159/0xad0 [ 1020.370103] ? do_syscall_64+0x4c/0x640 [ 1020.374121] ? align_vdso_addr+0x250/0x250 [ 1020.378376] do_syscall_64+0x1d5/0x640 [ 1020.382281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.387489] RIP: 0033:0x466459 [ 1020.390691] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1020.398403] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1020.405678] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1020.412952] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1020.420244] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1020.427527] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 06:46:00 executing program 3 (fault-call:0 fault-nth:3): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 4 (fault-call:0 fault-nth:0): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:00 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1020.434824] CPU: 1 PID: 31609 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 1020.442724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.452135] Call Trace: [ 1020.454738] dump_stack+0x1b2/0x281 [ 1020.456594] FAULT_INJECTION: forcing a failure. [ 1020.456594] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.458372] should_fail.cold+0x10a/0x149 [ 1020.458387] should_failslab+0xd6/0x130 [ 1020.458401] kmem_cache_alloc+0x28e/0x3c0 [ 1020.458419] __split_vma+0xc8/0x6c0 [ 1020.485501] do_munmap+0x25b/0xc30 [ 1020.489077] mmap_region+0x217/0x1220 [ 1020.492885] do_mmap+0x5b3/0xcb0 [ 1020.496257] vm_mmap_pgoff+0x14e/0x1a0 [ 1020.500146] ? vma_is_stack_for_current+0xb0/0xb0 [ 1020.504995] SyS_mmap_pgoff+0x3c5/0x510 [ 1020.508968] ? find_mergeable_anon_vma+0x230/0x230 [ 1020.513905] ? __do_page_fault+0x159/0xad0 [ 1020.518152] ? do_syscall_64+0x4c/0x640 [ 1020.522125] ? align_vdso_addr+0x250/0x250 [ 1020.526357] do_syscall_64+0x1d5/0x640 [ 1020.530358] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.535555] RIP: 0033:0x466459 [ 1020.538745] RSP: 002b:00007f91bd3e4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1020.546458] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1020.553743] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1020.561022] RBP: 00007f91bd3e41d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1020.568311] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1020.575590] R13: 00007ffe24f7d8bf R14: 00007f91bd3e4300 R15: 0000000000022000 [ 1020.583203] CPU: 0 PID: 31611 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 1020.591116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.600554] Call Trace: [ 1020.603158] dump_stack+0x1b2/0x281 [ 1020.606800] should_fail.cold+0x10a/0x149 [ 1020.610959] should_failslab+0xd6/0x130 [ 1020.614967] kmem_cache_alloc+0x28e/0x3c0 [ 1020.619124] __d_alloc+0x2a/0xa20 [ 1020.622610] ? __vm_enough_memory+0x261/0x520 [ 1020.627109] __shmem_file_setup.part.0+0x2a7/0x3c0 [ 1020.632047] ? shmem_create+0x30/0x30 [ 1020.635862] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1020.641329] shmem_zero_setup+0xba/0x380 [ 1020.645402] mmap_region+0xf71/0x1220 [ 1020.649344] do_mmap+0x5b3/0xcb0 [ 1020.652725] vm_mmap_pgoff+0x14e/0x1a0 [ 1020.657113] ? vma_is_stack_for_current+0xb0/0xb0 [ 1020.662008] SyS_mmap_pgoff+0x3c5/0x510 [ 1020.665990] ? find_mergeable_anon_vma+0x230/0x230 [ 1020.670925] ? __do_page_fault+0x159/0xad0 [ 1020.675167] ? do_syscall_64+0x4c/0x640 [ 1020.679150] ? align_vdso_addr+0x250/0x250 [ 1020.683395] do_syscall_64+0x1d5/0x640 [ 1020.687330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.692521] RIP: 0033:0x466459 [ 1020.695709] RSP: 002b:00007f5b50b4e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1020.703420] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1020.710705] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1020.717980] RBP: 00007f5b50b4e1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1020.725259] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1020.732541] R13: 00007ffc98c802ff R14: 00007f5b50b4e300 R15: 0000000000022000 [ 1020.745329] FAULT_INJECTION: forcing a failure. [ 1020.745329] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.745371] CPU: 1 PID: 31593 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 1020.764486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1020.773877] Call Trace: [ 1020.776480] dump_stack+0x1b2/0x281 [ 1020.780111] should_fail.cold+0x10a/0x149 [ 1020.784258] should_failslab+0xd6/0x130 06:46:01 executing program 2 (fault-call:0 fault-nth:1): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1020.788232] kmem_cache_alloc+0x28e/0x3c0 [ 1020.792378] __d_alloc+0x2a/0xa20 [ 1020.795831] d_alloc+0x46/0x240 [ 1020.799117] d_alloc_parallel+0xd6/0x16b0 [ 1020.803271] ? trace_hardirqs_on+0x10/0x10 [ 1020.807514] ? trace_hardirqs_on+0x10/0x10 [ 1020.811754] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1020.817228] ? lock_acquire+0x170/0x3f0 [ 1020.821216] ? __d_lookup_rcu+0x640/0x640 [ 1020.825386] ? lock_acquire+0x170/0x3f0 [ 1020.829380] ? lookup_slow+0x129/0x400 [ 1020.833284] lookup_slow+0x175/0x400 [ 1020.834203] FAULT_INJECTION: forcing a failure. [ 1020.834203] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.837017] ? follow_dotdot_rcu+0xf00/0xf00 [ 1020.837028] ? lookup_fast+0x430/0xe30 [ 1020.837044] ? security_inode_permission+0xb5/0xf0 [ 1020.837055] ? kernfs_iop_getattr+0xd0/0xd0 [ 1020.837071] walk_component+0x6a1/0xbc0 [ 1020.870272] ? lookup_fast+0xe30/0xe30 [ 1020.874183] ? walk_component+0xbc0/0xbc0 [ 1020.878355] path_lookupat+0x1bb/0x780 [ 1020.882262] ? path_mountpoint+0x940/0x940 [ 1020.886532] ? __lockdep_init_map+0x100/0x560 [ 1020.891065] ? __lockdep_init_map+0x100/0x560 [ 1020.895576] ? debug_mutex_init+0x28/0x60 [ 1020.899743] path_openat+0x18eb/0x2970 [ 1020.903640] ? get_pid_task+0x91/0x130 [ 1020.907544] ? path_lookupat+0x780/0x780 [ 1020.911631] ? trace_hardirqs_on+0x10/0x10 [ 1020.915886] do_filp_open+0x179/0x3c0 [ 1020.919710] ? may_open_dev+0xe0/0xe0 [ 1020.923523] ? do_raw_spin_unlock+0x164/0x220 [ 1020.928166] ? __alloc_fd+0x1be/0x490 [ 1020.931992] do_sys_open+0x296/0x410 [ 1020.935718] ? filp_open+0x60/0x60 [ 1020.939287] ? __do_page_fault+0x159/0xad0 [ 1020.943624] ? do_syscall_64+0x4c/0x640 [ 1020.947616] ? SyS_open+0x30/0x30 [ 1020.951079] do_syscall_64+0x1d5/0x640 [ 1020.955001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1020.960209] RIP: 0033:0x466459 [ 1020.963404] RSP: 002b:00007ffadcb66188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1020.971145] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1020.978421] RDX: 0000000000200002 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1020.985697] RBP: 00007ffadcb661d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.993255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.000652] R13: 00007ffc3c5c2abf R14: 00007ffadcb66300 R15: 0000000000022000 [ 1021.008454] CPU: 0 PID: 31617 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1021.016380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.025855] Call Trace: [ 1021.028454] dump_stack+0x1b2/0x281 [ 1021.032190] should_fail.cold+0x10a/0x149 [ 1021.036364] should_failslab+0xd6/0x130 [ 1021.040360] kmem_cache_alloc+0x28e/0x3c0 [ 1021.044530] __split_vma+0xc8/0x6c0 [ 1021.048185] do_munmap+0x25b/0xc30 [ 1021.051871] mmap_region+0x217/0x1220 [ 1021.055953] do_mmap+0x5b3/0xcb0 [ 1021.059349] vm_mmap_pgoff+0x14e/0x1a0 [ 1021.063266] ? vma_is_stack_for_current+0xb0/0xb0 [ 1021.068140] SyS_mmap_pgoff+0x3c5/0x510 [ 1021.072143] ? find_mergeable_anon_vma+0x230/0x230 [ 1021.077096] ? __do_page_fault+0x159/0xad0 [ 1021.081365] ? do_syscall_64+0x4c/0x640 [ 1021.085363] ? align_vdso_addr+0x250/0x250 [ 1021.089619] do_syscall_64+0x1d5/0x640 [ 1021.093547] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.098757] RIP: 0033:0x466459 [ 1021.101960] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1021.109685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1021.116979] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1021.124262] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1021.131545] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 06:46:01 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1021.138823] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1021.148841] CPU: 0 PID: 31620 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1021.156763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.166128] Call Trace: [ 1021.168735] dump_stack+0x1b2/0x281 [ 1021.172397] should_fail.cold+0x10a/0x149 [ 1021.176814] should_failslab+0xd6/0x130 [ 1021.180827] kmem_cache_alloc+0x28e/0x3c0 [ 1021.184994] __split_vma+0xc8/0x6c0 [ 1021.188651] do_munmap+0x2bc/0xc30 [ 1021.192701] mmap_region+0x217/0x1220 [ 1021.196511] do_mmap+0x5b3/0xcb0 [ 1021.199933] vm_mmap_pgoff+0x14e/0x1a0 [ 1021.203849] ? vma_is_stack_for_current+0xb0/0xb0 [ 1021.208727] SyS_mmap_pgoff+0x3c5/0x510 [ 1021.212730] ? find_mergeable_anon_vma+0x230/0x230 [ 1021.217907] ? __do_page_fault+0x159/0xad0 [ 1021.222171] ? do_syscall_64+0x4c/0x640 [ 1021.226184] ? align_vdso_addr+0x250/0x250 [ 1021.230444] do_syscall_64+0x1d5/0x640 [ 1021.234360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.239571] RIP: 0033:0x466459 [ 1021.242772] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1021.250496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1021.257910] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1021.265192] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1021.272765] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1021.280058] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 06:46:01 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010800", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="ec002a0075060100ff001f0f0406090105000008058e04b206d0f7e1c280ec3f3d4b8909e6a0e26c1ae18d53d4b9104434484dc2ab01d3d7f4999dbc44c8ca2a93aead0a186f6efe961b98867f82248c023ce127ea15a83b715a241f2c2f9779f5051b54b385c4c8d4a10edabf90e6e885bbd8054ab977cdfd0dad933108c8455fb2fc5eab32b363a4c83b8fb05d2a883b55a6c852a11b345adc43091da6d058793821a7680400001f0005370013e47dfbf8ce8c4e43116f20a4a84e7520668df132e79ae0f0c2bddbde22c8a758553e65f6b5cc3bf31810d852586f53ab48ee58919f7107ffff01010000000a00060008021100000000000a000600ffffffffffff0000"], 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 06:46:01 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 06:46:01 executing program 0 (fault-call:0 fault-nth:0): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f9, 0x82) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2000002, 0x40010, r0, 0x82000000) 06:46:01 executing program 4 (fault-call:0 fault-nth:1): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:01 executing program 2 (fault-call:0 fault-nth:2): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1021.384588] FAULT_INJECTION: forcing a failure. [ 1021.384588] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.402350] FAULT_INJECTION: forcing a failure. [ 1021.402350] name failslab, interval 1, probability 0, space 0, times 0 06:46:01 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1021.432212] FAULT_INJECTION: forcing a failure. [ 1021.432212] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.450916] CPU: 0 PID: 31642 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1021.459092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.468463] Call Trace: [ 1021.471208] dump_stack+0x1b2/0x281 [ 1021.474858] should_fail.cold+0x10a/0x149 [ 1021.479029] should_failslab+0xd6/0x130 [ 1021.483032] kmem_cache_alloc+0x28e/0x3c0 [ 1021.487204] __split_vma+0xc8/0x6c0 [ 1021.490856] do_munmap+0x2bc/0xc30 [ 1021.494421] mmap_region+0x217/0x1220 [ 1021.498275] do_mmap+0x5b3/0xcb0 [ 1021.501662] vm_mmap_pgoff+0x14e/0x1a0 [ 1021.505604] ? vma_is_stack_for_current+0xb0/0xb0 [ 1021.510476] SyS_mmap_pgoff+0x3c5/0x510 [ 1021.514487] ? find_mergeable_anon_vma+0x230/0x230 [ 1021.519438] ? __do_page_fault+0x159/0xad0 [ 1021.523689] ? do_syscall_64+0x4c/0x640 [ 1021.527677] ? align_vdso_addr+0x250/0x250 [ 1021.531935] do_syscall_64+0x1d5/0x640 [ 1021.535854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.541054] RIP: 0033:0x466459 [ 1021.544244] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1021.552049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1021.559335] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1021.566608] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1021.573884] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 06:46:02 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x4, 0x8}) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r0, @ANYBLOB="040028bd7000fddbdf250900000070000680040002004a0003005e0b8b2c4dbdaaf7481b9e5d18596be621eab5164b2ba7eaa922c03dbfc1ecc142ed4f3ca97f52134a702b9c63fa79f316401db19bc5e7ae38a87c9d418afe736a39edca1d19000008000100db0700000800017fb1b6afc46d5b200002000000040002000800010008000000b80005801c000280080002000200000008000100020000000800020001000000080001006574680008000100657468001400028008000300a2000000080004003f0000004c00028008000300f60c00000800040002000000080001001800000008000300ff0300000800020008000008000400070000000800020001000080080003000100000014000280080001001800000008000300050000000c00028008000300090000000800cb62280301006574680024000980080001009b5a0000080001000100000008000100ffffffff08000100010000000c00068008000100090000001000028004000400080001008e9e0000100007800c00030001000000000000000c00038008000300810000002c000380080002000700000008000100ff0f0000080002000100000008000200ff0700"/450], 0x1c4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:02 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x100000d, 0x10, r0, 0x82000000) clock_gettime(0x0, &(0x7f0000002dc0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/117, 0x75}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000000380)=""/53, 0x35}], 0x6, &(0x7f0000002f40)=""/4096, 0x1000}, 0xae}, {{&(0x7f0000001440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002a40)=[{&(0x7f00000014c0)=""/9, 0x9}, {&(0x7f0000001500)=""/93, 0x5d}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/191, 0xbf}, {&(0x7f0000002e40)=""/236, 0xec}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/138, 0x8a}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002980)=""/139, 0x8b}], 0x9, &(0x7f0000002b00)=""/240, 0xf0}, 0x5}, {{&(0x7f0000002c00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c80)=""/39, 0x27}], 0x1}, 0x7ff}], 0x3, 0x10000, &(0x7f0000002e00)={r1, r2+10000000}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400800) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x20010, r0, 0xa000) [ 1021.581157] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1021.597913] CPU: 0 PID: 31648 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1021.605876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.615235] Call Trace: [ 1021.617833] dump_stack+0x1b2/0x281 [ 1021.621468] should_fail.cold+0x10a/0x149 [ 1021.625622] should_failslab+0xd6/0x130 [ 1021.629633] kmem_cache_alloc+0x28e/0x3c0 [ 1021.633790] __split_vma+0xc8/0x6c0 [ 1021.637443] do_munmap+0x25b/0xc30 [ 1021.641005] mmap_region+0x217/0x1220 [ 1021.644827] do_mmap+0x5b3/0xcb0 [ 1021.648206] vm_mmap_pgoff+0x14e/0x1a0 [ 1021.652105] ? vma_is_stack_for_current+0xb0/0xb0 [ 1021.656976] SyS_mmap_pgoff+0x3c5/0x510 [ 1021.660962] ? find_mergeable_anon_vma+0x230/0x230 [ 1021.665900] ? __do_page_fault+0x159/0xad0 [ 1021.670529] ? do_syscall_64+0x4c/0x640 [ 1021.674511] ? align_vdso_addr+0x250/0x250 [ 1021.678762] do_syscall_64+0x1d5/0x640 06:46:02 executing program 5: mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x10010, 0xffffffffffffffff, 0x82000000) [ 1021.682674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.687879] RIP: 0033:0x466459 [ 1021.691074] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1021.698792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1021.706066] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1021.713344] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1021.720740] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1021.728538] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 06:46:02 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1021.753121] CPU: 1 PID: 31649 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1021.761045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1021.771658] Call Trace: [ 1021.774283] dump_stack+0x1b2/0x281 [ 1021.777928] should_fail.cold+0x10a/0x149 [ 1021.782148] should_failslab+0xd6/0x130 [ 1021.786140] kmem_cache_alloc+0x28e/0x3c0 [ 1021.790303] mmap_region+0x7c1/0x1220 [ 1021.794394] do_mmap+0x5b3/0xcb0 [ 1021.797864] vm_mmap_pgoff+0x14e/0x1a0 06:46:02 executing program 3: ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000040)={0x0, 0x3, 0x1ff, 0x4, &(0x7f0000000000)=[{0x1, 0xaf, 0x7, 0x3ff}, {0x20, 0x400, 0x6, 0x32}, {0x6, 0x1401, 0x1ff, 0x2}, {0x4, 0xee2, 0xfffd, 0x6}]}) 06:46:02 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x1}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000042b3caa1fff56a041cb9a9ab73ed0d482e4011f291e2d23eab655b4b73c7bde439510adf749e7b28238f7109824521ea361198953d8c3f18d29cbff320fd59eb7372e16e8594b2a6430b04e5ca3aafe376c5b115c3eb63494c89d890c0653cea29ad6156fcc7b7f3ceb12e207fe4493287f4b4ee5cfd067c600cb4f08512f9b6a1b0d7eedb83afba4c73965190a5967cec", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf258100000004006700"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4044011) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x88b23, 0x0) [ 1021.801942] ? vma_is_stack_for_current+0xb0/0xb0 [ 1021.806811] SyS_mmap_pgoff+0x3c5/0x510 [ 1021.810902] ? find_mergeable_anon_vma+0x230/0x230 [ 1021.815844] ? __do_page_fault+0x159/0xad0 [ 1021.820090] ? do_syscall_64+0x4c/0x640 [ 1021.825060] ? align_vdso_addr+0x250/0x250 [ 1021.829324] do_syscall_64+0x1d5/0x640 [ 1021.833232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1021.838430] RIP: 0033:0x466459 [ 1021.841628] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:46:02 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) [ 1021.849737] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1021.857843] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1021.865383] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1021.872654] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1021.879928] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 06:46:02 executing program 0 (fault-call:0 fault-nth:1): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 1: ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x20000000, 0x6, 0x18}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:46:02 executing program 5: mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000005, 0x110, 0xffffffffffffffff, 0x82000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20008841) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x10001) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x480c1) fcntl$getown(r1, 0x9) 06:46:02 executing program 4 (fault-call:0 fault-nth:2): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 2 (fault-call:0 fault-nth:3): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/170) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200100, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000140)={0x2, 0x5, 0x10000, 0x8feecca2, 0x46a, 0x5, 0x2, 0x1, 0x81}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) inotify_rm_watch(r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) [ 1021.971836] FAULT_INJECTION: forcing a failure. [ 1021.971836] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.972872] FAULT_INJECTION: forcing a failure. [ 1021.972872] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.002055] FAULT_INJECTION: forcing a failure. [ 1022.002055] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.027485] CPU: 0 PID: 31700 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1022.035420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.044785] Call Trace: [ 1022.047382] dump_stack+0x1b2/0x281 [ 1022.051022] should_fail.cold+0x10a/0x149 [ 1022.055191] should_failslab+0xd6/0x130 [ 1022.059299] kmem_cache_alloc+0x28e/0x3c0 [ 1022.063466] __split_vma+0xc8/0x6c0 [ 1022.067109] do_munmap+0x2bc/0xc30 [ 1022.070661] mmap_region+0x217/0x1220 [ 1022.074476] do_mmap+0x5b3/0xcb0 [ 1022.077853] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.081755] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.086620] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.090883] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.095829] ? __do_page_fault+0x159/0xad0 [ 1022.100087] ? do_syscall_64+0x4c/0x640 [ 1022.104073] ? align_vdso_addr+0x250/0x250 [ 1022.108340] do_syscall_64+0x1d5/0x640 [ 1022.112241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.117433] RIP: 0033:0x466459 [ 1022.120628] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:46:02 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x2010, r0, 0x7fb2a000) 06:46:02 executing program 5: syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00', 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x77f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) [ 1022.128345] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.135623] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.142899] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.150173] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.157470] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1022.164767] CPU: 1 PID: 31694 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1022.172672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.182035] Call Trace: [ 1022.184637] dump_stack+0x1b2/0x281 [ 1022.188280] should_fail.cold+0x10a/0x149 [ 1022.192471] should_failslab+0xd6/0x130 [ 1022.196474] kmem_cache_alloc+0x28e/0x3c0 [ 1022.200650] mmap_region+0x7c1/0x1220 [ 1022.204477] do_mmap+0x5b3/0xcb0 [ 1022.207860] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.211865] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.216842] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.220840] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.225790] ? __do_page_fault+0x159/0xad0 [ 1022.230048] ? do_syscall_64+0x4c/0x640 [ 1022.234041] ? align_vdso_addr+0x250/0x250 [ 1022.238296] do_syscall_64+0x1d5/0x640 [ 1022.242215] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.247426] RIP: 0033:0x466459 [ 1022.250623] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.258375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.265660] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 06:46:02 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) fork() mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x30, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x74f7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc13e}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 06:46:02 executing program 5: mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r0, 0x83000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x8], 0x1, 0x800, 0x0, 0xffffffffffffffff}) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x3000008, 0x2010, r1, 0x82000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x40200, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000100)=[{'DIGITAL1', @void}, {'PCM', @void}, {'IMIX', @void}], 0x12) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000/0x4000)=nil}) [ 1022.273078] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.280365] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.287651] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1022.307974] CPU: 1 PID: 31703 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1022.316007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.325421] Call Trace: 06:46:02 executing program 0 (fault-call:0 fault-nth:2): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.328022] dump_stack+0x1b2/0x281 [ 1022.331679] should_fail.cold+0x10a/0x149 [ 1022.335860] should_failslab+0xd6/0x130 [ 1022.339868] kmem_cache_alloc+0x28e/0x3c0 [ 1022.344039] __d_alloc+0x2a/0xa20 [ 1022.347515] ? __vm_enough_memory+0x261/0x520 [ 1022.352037] __shmem_file_setup.part.0+0x2a7/0x3c0 [ 1022.357095] ? shmem_create+0x30/0x30 [ 1022.360922] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.366438] shmem_zero_setup+0xba/0x380 [ 1022.370664] mmap_region+0xf71/0x1220 06:46:02 executing program 2 (fault-call:0 fault-nth:4): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 4 (fault-call:0 fault-nth:3): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.370681] do_mmap+0x5b3/0xcb0 [ 1022.370696] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.370711] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.370727] SyS_mmap_pgoff+0x3c5/0x510 06:46:02 executing program 3: mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000)={0x0, 0x83}, 0x2) 06:46:02 executing program 2 (fault-call:0 fault-nth:5): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.370739] ? find_mergeable_anon_vma+0x230/0x230 06:46:02 executing program 0 (fault-call:0 fault-nth:3): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:02 executing program 1: sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="200628bd7000fcdbdf25130000000500030002000000050003000800000006000800a0aa0000050003001f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) [ 1022.370750] ? __do_page_fault+0x159/0xad0 06:46:02 executing program 4 (fault-call:0 fault-nth:4): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.370759] ? do_syscall_64+0x4c/0x640 06:46:03 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000000)="2625809bd106080b8167eb349b8abeac0184cdc29ccde269784f69fa4499bb57896928663ece30740fac364f410a4c202233311755c528fb359d96c2868b808669355dd470db76b655c761aff0e508fc38e2a03dccd839ad95bcb3f2ccd457dd6fd00fda039a70fc66e4dcf742a100c5111d27", 0x73}, 0x68) [ 1022.370767] ? align_vdso_addr+0x250/0x250 06:46:03 executing program 1: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x48, 0x0, 0x516, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x81, 0x1}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4d}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x104f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008c000}, 0x240000c4) clock_gettime(0x2, &(0x7f0000000180)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) clock_getres(0x5, &(0x7f0000000080)) [ 1022.370775] do_syscall_64+0x1d5/0x640 06:46:03 executing program 2 (fault-call:0 fault-nth:6): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.370791] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.370799] RIP: 0033:0x466459 [ 1022.370804] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.370814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.370819] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.370823] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.370827] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.370832] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 [ 1022.444508] FAULT_INJECTION: forcing a failure. [ 1022.444508] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.444524] CPU: 0 PID: 31750 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1022.444531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.444536] Call Trace: [ 1022.444555] dump_stack+0x1b2/0x281 [ 1022.444571] should_fail.cold+0x10a/0x149 [ 1022.444588] should_failslab+0xd6/0x130 [ 1022.444615] kmem_cache_alloc+0x28e/0x3c0 [ 1022.444629] ? shmem_destroy_callback+0xa0/0xa0 [ 1022.444641] shmem_alloc_inode+0x18/0x40 [ 1022.444652] ? shmem_destroy_callback+0xa0/0xa0 [ 1022.444661] alloc_inode+0x5d/0x170 [ 1022.444673] new_inode+0x1d/0xf0 [ 1022.444685] shmem_get_inode+0x8b/0x890 [ 1022.444705] __shmem_file_setup.part.0+0x2e7/0x3c0 [ 1022.444723] ? shmem_create+0x30/0x30 [ 1022.444744] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.444760] shmem_zero_setup+0xba/0x380 [ 1022.444777] mmap_region+0xf71/0x1220 [ 1022.444803] do_mmap+0x5b3/0xcb0 [ 1022.444823] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.444843] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.444869] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.444892] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.444907] ? __do_page_fault+0x159/0xad0 [ 1022.444924] ? do_syscall_64+0x4c/0x640 [ 1022.444938] ? align_vdso_addr+0x250/0x250 [ 1022.444950] do_syscall_64+0x1d5/0x640 [ 1022.444971] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.444981] RIP: 0033:0x466459 [ 1022.444988] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.444999] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.445006] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.445012] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.445018] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.445024] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 [ 1022.455897] FAULT_INJECTION: forcing a failure. [ 1022.455897] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.455914] CPU: 0 PID: 31751 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1022.455922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.455926] Call Trace: [ 1022.455947] dump_stack+0x1b2/0x281 [ 1022.455963] should_fail.cold+0x10a/0x149 [ 1022.455980] should_failslab+0xd6/0x130 [ 1022.455995] kmem_cache_alloc+0x28e/0x3c0 [ 1022.456009] mmap_region+0x7c1/0x1220 [ 1022.456027] do_mmap+0x5b3/0xcb0 [ 1022.456046] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.456064] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.456087] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.456104] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.456117] ? __do_page_fault+0x159/0xad0 [ 1022.456131] ? do_syscall_64+0x4c/0x640 [ 1022.456143] ? align_vdso_addr+0x250/0x250 [ 1022.456154] do_syscall_64+0x1d5/0x640 [ 1022.456185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.456194] RIP: 0033:0x466459 [ 1022.456201] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.456214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.456222] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.456229] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.456235] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.456242] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1022.497985] FAULT_INJECTION: forcing a failure. [ 1022.497985] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.497999] CPU: 0 PID: 31758 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1022.498006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.498011] Call Trace: [ 1022.498030] dump_stack+0x1b2/0x281 [ 1022.498046] should_fail.cold+0x10a/0x149 [ 1022.498061] should_failslab+0xd6/0x130 [ 1022.498076] kmem_cache_alloc+0x28e/0x3c0 [ 1022.498089] __d_alloc+0x2a/0xa20 [ 1022.498103] ? __vm_enough_memory+0x261/0x520 [ 1022.498117] __shmem_file_setup.part.0+0x2a7/0x3c0 [ 1022.498129] ? shmem_create+0x30/0x30 [ 1022.498145] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.498174] shmem_zero_setup+0xba/0x380 [ 1022.498189] mmap_region+0xf71/0x1220 [ 1022.498208] do_mmap+0x5b3/0xcb0 [ 1022.498225] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.498244] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.498263] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.498278] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.498290] ? __do_page_fault+0x159/0xad0 [ 1022.498300] ? do_syscall_64+0x4c/0x640 [ 1022.498312] ? align_vdso_addr+0x250/0x250 [ 1022.498324] do_syscall_64+0x1d5/0x640 [ 1022.498344] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.498353] RIP: 0033:0x466459 [ 1022.498359] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.498372] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.498379] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.498385] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.498392] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.498398] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1022.562548] FAULT_INJECTION: forcing a failure. [ 1022.562548] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.562563] CPU: 1 PID: 31770 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1022.562570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.562574] Call Trace: [ 1022.562592] dump_stack+0x1b2/0x281 [ 1022.562608] should_fail.cold+0x10a/0x149 [ 1022.562623] should_failslab+0xd6/0x130 [ 1022.562640] kmem_cache_alloc+0x28e/0x3c0 [ 1022.562666] get_empty_filp+0x86/0x3e0 [ 1022.562680] alloc_file+0x23/0x440 [ 1022.562696] __shmem_file_setup.part.0+0x198/0x3c0 [ 1022.562708] ? shmem_create+0x30/0x30 [ 1022.562725] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.562737] shmem_zero_setup+0xba/0x380 [ 1022.562749] mmap_region+0xf71/0x1220 [ 1022.562766] do_mmap+0x5b3/0xcb0 [ 1022.562781] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.562795] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.562812] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.562825] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.562835] ? __do_page_fault+0x159/0xad0 [ 1022.562845] ? do_syscall_64+0x4c/0x640 [ 1022.562853] ? align_vdso_addr+0x250/0x250 [ 1022.562865] do_syscall_64+0x1d5/0x640 [ 1022.562887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.562897] RIP: 0033:0x466459 [ 1022.562904] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.562915] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.562921] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.562928] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.562935] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.562941] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 [ 1022.589951] FAULT_INJECTION: forcing a failure. [ 1022.589951] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.589968] CPU: 1 PID: 31780 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1022.589975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.589979] Call Trace: [ 1022.589998] dump_stack+0x1b2/0x281 [ 1022.590022] should_fail.cold+0x10a/0x149 [ 1022.590038] should_failslab+0xd6/0x130 [ 1022.590052] kmem_cache_alloc+0x28e/0x3c0 [ 1022.590066] __d_alloc+0x2a/0xa20 [ 1022.590079] ? __vm_enough_memory+0x261/0x520 [ 1022.590094] __shmem_file_setup.part.0+0x2a7/0x3c0 [ 1022.590105] ? shmem_create+0x30/0x30 [ 1022.590120] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.590132] shmem_zero_setup+0xba/0x380 [ 1022.590144] mmap_region+0xf71/0x1220 [ 1022.590161] do_mmap+0x5b3/0xcb0 [ 1022.590179] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.590195] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.590215] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.590230] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.590243] ? __do_page_fault+0x159/0xad0 [ 1022.590252] ? do_syscall_64+0x4c/0x640 [ 1022.590261] ? align_vdso_addr+0x250/0x250 [ 1022.590272] do_syscall_64+0x1d5/0x640 [ 1022.590289] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.590297] RIP: 0033:0x466459 [ 1022.590302] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.590313] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.590319] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.590326] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.590332] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.590338] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1022.599186] FAULT_INJECTION: forcing a failure. [ 1022.599186] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.599203] CPU: 0 PID: 31782 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1022.599211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.599215] Call Trace: [ 1022.599234] dump_stack+0x1b2/0x281 [ 1022.599248] should_fail.cold+0x10a/0x149 [ 1022.599263] should_failslab+0xd6/0x130 [ 1022.599277] kmem_cache_alloc+0x28e/0x3c0 [ 1022.599289] ? shmem_destroy_callback+0xa0/0xa0 [ 1022.599298] shmem_alloc_inode+0x18/0x40 [ 1022.599307] ? shmem_destroy_callback+0xa0/0xa0 [ 1022.599318] alloc_inode+0x5d/0x170 [ 1022.599332] new_inode+0x1d/0xf0 [ 1022.599345] shmem_get_inode+0x8b/0x890 [ 1022.599360] __shmem_file_setup.part.0+0x2e7/0x3c0 [ 1022.599372] ? shmem_create+0x30/0x30 [ 1022.599389] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.599404] shmem_zero_setup+0xba/0x380 [ 1022.599416] mmap_region+0xf71/0x1220 [ 1022.599435] do_mmap+0x5b3/0xcb0 [ 1022.599449] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.599464] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.599483] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.599497] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.599509] ? __do_page_fault+0x159/0xad0 [ 1022.599520] ? do_syscall_64+0x4c/0x640 [ 1022.599532] ? align_vdso_addr+0x250/0x250 [ 1022.599544] do_syscall_64+0x1d5/0x640 [ 1022.599563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.599573] RIP: 0033:0x466459 [ 1022.599578] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.599588] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.599594] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.599600] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1022.599607] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.599613] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1022.662796] FAULT_INJECTION: forcing a failure. [ 1022.662796] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.662816] CPU: 1 PID: 31796 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1022.662823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1022.662828] Call Trace: [ 1022.662843] dump_stack+0x1b2/0x281 [ 1022.662858] should_fail.cold+0x10a/0x149 [ 1022.662874] should_failslab+0xd6/0x130 [ 1022.662889] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1022.662906] apparmor_file_alloc_security+0x129/0x800 [ 1022.662922] security_file_alloc+0x66/0xa0 [ 1022.662934] ? selinux_is_enabled+0x5/0x50 [ 1022.662947] get_empty_filp+0x15c/0x3e0 [ 1022.662959] alloc_file+0x23/0x440 [ 1022.662974] __shmem_file_setup.part.0+0x198/0x3c0 [ 1022.662985] ? shmem_create+0x30/0x30 [ 1022.662999] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1022.663011] shmem_zero_setup+0xba/0x380 [ 1022.663030] mmap_region+0xf71/0x1220 [ 1022.663047] do_mmap+0x5b3/0xcb0 [ 1022.663061] vm_mmap_pgoff+0x14e/0x1a0 [ 1022.663076] ? vma_is_stack_for_current+0xb0/0xb0 [ 1022.663093] SyS_mmap_pgoff+0x3c5/0x510 [ 1022.663106] ? find_mergeable_anon_vma+0x230/0x230 [ 1022.663115] ? __do_page_fault+0x159/0xad0 [ 1022.663125] ? do_syscall_64+0x4c/0x640 [ 1022.663133] ? align_vdso_addr+0x250/0x250 [ 1022.663144] do_syscall_64+0x1d5/0x640 [ 1022.663162] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1022.663172] RIP: 0033:0x466459 [ 1022.663179] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1022.663190] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1022.663196] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1022.663203] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 06:46:04 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 06:46:04 executing program 4 (fault-call:0 fault-nth:5): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:04 executing program 0 (fault-call:0 fault-nth:4): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:04 executing program 3: sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000db2eadbdc4b32a88f56e67a3d04d6859dee2d41894b3adaf2e7c525b7bc9415649e0fd191c4cd03aa92999db20b99053cb3221a21c7ff0e0c53b762e8fa13fb276104e890f9431f01fd62b238aac2292b1b02839ebadcb92e239f03d0d62a0642b965630b0221dc480f1d2f960aff178a718a2502238c47e8eb5becc725ba1ab89f84530fd0258f22aa21855e49d4bfadcd721c6577d89ef82a3ed2cfe88e68be261691305e4a3a7115ce2adcca335687df15db92d4c103bccf439f63d37e95bfe307cc07d80882ecff79c81399bfe0ffc2abeaccb24ea33ed38bbb442dc00000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf250d000000050007000f000000b00e07173b8b2c8289fc125947f49eabd687bbe68bd2abb8b5992ea8752573b8d801654932fb29f3a84d1eeaca7a71c902b71625a08789947cc0d191d36916785a22f0c1de74755f8f631bd49a1149707d3b0db7810a6dc7ec4968166241c0c6e9db69f8aab870902725757e4fdc84be8a2f75c165a66390257561bffb7c9be31edabd2ff5c7a36da428b745f4515d1feedf3f283961be3ea713cfc7d7cf9370f01ce91fe06f18d1a35dbda0e20aeac87c727a0b8d9bad43f7248061f801802bf43430e3800d1d4fd04dcf51edd63f1b36078e46e90b4d6e790eb9e0a89f52bb022102afea1fc8133fd38680734a71a55572475a4f63a31d3e8d49108f27038a928ac97f6080e0ec2813acaa0a0ba1237c14ea492ead01c092758679500d561064f914031f85fc3e2ac545dfe99032a68d3e15ec450985e90ad77fb7fd9b6718a8aae965905f05b530d6f29b28"], 0x1c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4840) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:04 executing program 1: mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x6a639000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:04 executing program 2 (fault-call:0 fault-nth:7): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1022.663210] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1022.663216] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 06:46:04 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x400}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 06:46:04 executing program 1: socketpair(0x23, 0x800, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xf}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1023.965244] FAULT_INJECTION: forcing a failure. [ 1023.965244] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.978920] FAULT_INJECTION: forcing a failure. [ 1023.978920] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.997743] FAULT_INJECTION: forcing a failure. [ 1023.997743] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1024.046205] CPU: 1 PID: 31817 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1024.054140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.063506] Call Trace: [ 1024.066115] dump_stack+0x1b2/0x281 [ 1024.069763] should_fail.cold+0x10a/0x149 [ 1024.073932] should_failslab+0xd6/0x130 [ 1024.077929] kmem_cache_alloc+0x28e/0x3c0 [ 1024.082096] ? shmem_destroy_callback+0xa0/0xa0 [ 1024.086780] shmem_alloc_inode+0x18/0x40 [ 1024.090852] ? shmem_destroy_callback+0xa0/0xa0 [ 1024.095532] alloc_inode+0x5d/0x170 [ 1024.099172] new_inode+0x1d/0xf0 [ 1024.102551] shmem_get_inode+0x8b/0x890 [ 1024.106544] __shmem_file_setup.part.0+0x2e7/0x3c0 [ 1024.111491] ? shmem_create+0x30/0x30 [ 1024.115309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1024.120774] shmem_zero_setup+0xba/0x380 [ 1024.124847] mmap_region+0xf71/0x1220 [ 1024.128658] do_mmap+0x5b3/0xcb0 [ 1024.132037] vm_mmap_pgoff+0x14e/0x1a0 [ 1024.135934] ? vma_is_stack_for_current+0xb0/0xb0 [ 1024.140797] SyS_mmap_pgoff+0x3c5/0x510 [ 1024.144788] ? find_mergeable_anon_vma+0x230/0x230 [ 1024.149734] ? __do_page_fault+0x159/0xad0 [ 1024.153983] ? do_syscall_64+0x4c/0x640 [ 1024.157973] ? align_vdso_addr+0x250/0x250 [ 1024.162224] do_syscall_64+0x1d5/0x640 [ 1024.166127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.171317] RIP: 0033:0x466459 [ 1024.174543] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1024.182274] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1024.189555] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 06:46:04 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0xe, 0x810, 0xffffffffffffffff, 0x82000000) [ 1024.196828] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1024.204103] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1024.211378] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1024.246405] CPU: 0 PID: 31827 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1024.254338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.263696] Call Trace: [ 1024.266291] dump_stack+0x1b2/0x281 [ 1024.269927] should_fail.cold+0x10a/0x149 [ 1024.274086] should_failslab+0xd6/0x130 [ 1024.278071] kmem_cache_alloc+0x28e/0x3c0 [ 1024.282220] get_empty_filp+0x86/0x3e0 [ 1024.286127] alloc_file+0x23/0x440 [ 1024.289672] __shmem_file_setup.part.0+0x198/0x3c0 [ 1024.294635] ? shmem_create+0x30/0x30 [ 1024.298452] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1024.303911] shmem_zero_setup+0xba/0x380 [ 1024.307987] mmap_region+0xf71/0x1220 [ 1024.311814] do_mmap+0x5b3/0xcb0 [ 1024.315182] vm_mmap_pgoff+0x14e/0x1a0 [ 1024.319069] ? vma_is_stack_for_current+0xb0/0xb0 [ 1024.323941] SyS_mmap_pgoff+0x3c5/0x510 [ 1024.327922] ? find_mergeable_anon_vma+0x230/0x230 [ 1024.332859] ? __do_page_fault+0x159/0xad0 [ 1024.337103] ? do_syscall_64+0x4c/0x640 [ 1024.341084] ? align_vdso_addr+0x250/0x250 [ 1024.345324] do_syscall_64+0x1d5/0x640 [ 1024.349223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.354427] RIP: 0033:0x466459 [ 1024.357618] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1024.365339] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1024.372621] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1024.379895] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1024.387164] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 06:46:04 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xfffffffffffffd4e, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000877d3c8bf8ba5b128bd7000fadbdf251000000005a695dd6b18ce38f2ed656abc82e420a6699b02129f411741b3758020a6be5112aedfbbc8a5bac2b7fec20b99943d84b9f85b40af3a11df37ee4b8fffbcf563"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x15) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x40000, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="608020159c34e0bb0b2c5f8dc1f0616d3a5d2370b6ffde8a3fd6669a6165449e60067a0d36f2608dce8079e7536338473dda6e9f26a170a65be88ba68274b8612bde5048dc041182bdea4aee0a4e06b91d61e1975e35", @ANYRES16=0x0, @ANYBLOB="00082dbd7000ffdbdf25150000004c00018008000300010000001400020076657468315f766c616e0000000000000800030000000000080003000100000014000200626174616476300000000000000000000800030003000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x400, 0x70bd2b, 0x2ad, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x15}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1c1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x18e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/cachefiles\x00', 0x4001, 0x0) recvmmsg(r0, &(0x7f000000c5c0)=[{{&(0x7f0000007900)=@xdp, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007980)=""/33, 0x21}, {&(0x7f00000079c0)=""/50, 0x32}], 0x2, &(0x7f0000007a40)=""/229, 0xe5}, 0x8f7}, {{0x0, 0x0, &(0x7f0000007bc0)=[{&(0x7f0000007b40)=""/63, 0x3f}, {&(0x7f0000007b80)=""/31, 0x1f}], 0x2, &(0x7f0000007c00)=""/254, 0xfe}, 0x8000}, {{&(0x7f0000007d00)=@ipx, 0x80, &(0x7f0000007f00)=[{&(0x7f0000007d80)=""/224, 0xe0}, {&(0x7f0000007e80)=""/36, 0x24}, {&(0x7f0000007ec0)=""/57, 0x39}], 0x3}, 0x3f}, {{&(0x7f0000007f40)=@tipc, 0x80, &(0x7f0000009240)=[{&(0x7f0000007fc0)=""/79, 0x4f}, {&(0x7f0000008040)=""/4096, 0x1000}, {&(0x7f0000009040)=""/199, 0xc7}, {&(0x7f0000009140)=""/249, 0xf9}], 0x4, &(0x7f0000009280)=""/136, 0x88}, 0x4}, {{&(0x7f0000009340)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f000000a840)=[{&(0x7f00000093c0)=""/248, 0xf8}, {&(0x7f00000094c0)=""/225, 0xe1}, {&(0x7f00000095c0)=""/115, 0x73}, {&(0x7f0000009640)=""/139, 0x8b}, {&(0x7f0000009700)=""/4096, 0x1000}, {&(0x7f000000a700)=""/242, 0xf2}, {&(0x7f000000a800)=""/47, 0x2f}], 0x7, &(0x7f000000a8c0)}, 0x6}, {{&(0x7f000000a900)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f000000bd40)=[{&(0x7f000000a980)=""/187, 0xbb}, {&(0x7f000000aa40)=""/202, 0xca}, {&(0x7f000000ab40)=""/152, 0x98}, {&(0x7f000000ac00)=""/4096, 0x1000}, {&(0x7f000000bc00)=""/232, 0xe8}, {&(0x7f000000bd00)=""/9, 0x9}], 0x6, &(0x7f000000bdc0)=""/244, 0xf4}, 0x40}, {{&(0x7f000000bec0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000c240)=[{&(0x7f000000bf40)=""/195, 0xc3}, {&(0x7f000000c040)=""/175, 0xaf}, {&(0x7f000000c100)=""/33, 0x21}, {&(0x7f000000c140)=""/162, 0xa2}, {&(0x7f000000c200)=""/57, 0x39}], 0x5, &(0x7f000000c2c0)=""/45, 0x2d}, 0x400}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f000000c300)=""/206, 0xce}, {&(0x7f000000c400)=""/220, 0xdc}, {&(0x7f0000000480)=""/48, 0x30}], 0x3, &(0x7f000000c540)=""/118, 0x76}, 0x6}], 0x8, 0x40000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f000000c7c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f000000c980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000c940)={&(0x7f0000000c40)={0x6f, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS, @ETHTOOL_A_HEADER_FLAGS]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40044}, 0x20000041) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf25030000000800010003000001000200000008000200020000000ec9e0d29d3915fa8721d0e6620a27ca45e447415a5f9d0aa19ea9999222992b8aa4198e89e2"], 0x2c}, 0x1, 0x0, 0x0, 0x4048850}, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00', r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00', r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYRES64=r3, @ANYRES16=r4, @ANYBLOB="00e457230a0127bd7000ffdbdf250e000000", @ANYRES32=r5, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x4011) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) write$proc_mixer(r1, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYBLOB="4ec26495a88100448feed690600fab602d59d949cb8cbe6c26b8bf9869dd7bc38565625fe6dc41e3b8a52e8231dc44aebfd614cc6e78c74b1206cd2ae643baffe94957ce995921a8b4cb7dec373f7ae9687c8090ef7dc57515b5a722d6b57d83274b7d836f6154eb08ddd4492d7a03a5d8b5c9", @ANYRES32=r3, @ANYRESDEC=r6, @ANYRESHEX], 0xae) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00', r1) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) [ 1024.394449] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1024.401741] CPU: 1 PID: 31823 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1024.409650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.419021] Call Trace: [ 1024.421617] dump_stack+0x1b2/0x281 [ 1024.425254] should_fail.cold+0x10a/0x149 [ 1024.429546] __alloc_pages_nodemask+0x22c/0x2720 [ 1024.434325] ? __free_pages_ok+0x3f1/0xeb0 [ 1024.438634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1024.443505] ? put_task_stack+0xa0/0x1c0 [ 1024.447689] ? finish_task_switch+0x42c/0x610 [ 1024.452207] ? switch_mm_irqs_off+0x601/0xeb0 [ 1024.456718] alloc_pages_current+0x155/0x260 [ 1024.461141] pte_alloc_one+0x15/0x100 [ 1024.464969] do_fault_around+0x3f1/0x620 [ 1024.469045] __handle_mm_fault+0x2b1f/0x4620 [ 1024.473468] ? vm_insert_page+0x7c0/0x7c0 [ 1024.477630] ? mark_held_locks+0xa6/0xf0 [ 1024.481707] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1024.486835] handle_mm_fault+0x391/0x860 [ 1024.490996] __get_user_pages+0x445/0x11d0 06:46:04 executing program 4 (fault-call:0 fault-nth:6): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:04 executing program 1: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x30, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7f, 0x5, 0x8, 0xded}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x8080) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000007, 0x80010, r0, 0x98380000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000001480)=r2) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000015c0)='tasks\x00', 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004054}, 0x20000800) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="941304", @ANYRES16=r4, @ANYBLOB="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"], 0x1194}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:46:05 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x100000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x4, 0x7b0, 0x0, 0x1ff, 0x9aa0, 0x2, 0x4, 0x9, 0x5, 0x5], 0xa, 0x800, 0x0, 0xffffffffffffffff}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x729441, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0xfff, 0xffffffff, 0x2619, 0x2, 0x100, 0x100, 0x1000, 0x2, 0x1], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80, 0xfbfbfbfb}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240)=[0x1000, 0xf7, 0x6, 0xfffffdcf], 0x4, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f00000002c0)={0x9}) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000100)={0x0, 0x2}, 0x2) [ 1024.495254] ? follow_page_mask+0x18a0/0x18a0 [ 1024.499766] ? memset+0x20/0x40 [ 1024.503059] populate_vma_page_range+0x17b/0x210 [ 1024.507837] __mm_populate+0x195/0x2c0 [ 1024.511774] ? populate_vma_page_range+0x210/0x210 [ 1024.516723] vm_mmap_pgoff+0x18f/0x1a0 [ 1024.520626] ? vma_is_stack_for_current+0xb0/0xb0 [ 1024.525494] SyS_mmap_pgoff+0x3c5/0x510 [ 1024.529489] ? find_mergeable_anon_vma+0x230/0x230 [ 1024.534433] ? __do_page_fault+0x159/0xad0 [ 1024.538680] ? do_syscall_64+0x4c/0x640 [ 1024.542664] ? align_vdso_addr+0x250/0x250 06:46:05 executing program 0 (fault-call:0 fault-nth:5): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:05 executing program 2 (fault-call:0 fault-nth:8): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1024.546939] do_syscall_64+0x1d5/0x640 [ 1024.546960] entry_SYSCALL_64_after_hwframe+0x46/0xbb 06:46:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000140)=r2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x80000000, 0x0, 0x10001}) 06:46:05 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x4009152, r0, 0x82000000) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={0x0, &(0x7f0000000040)=""/161}) 06:46:05 executing program 4 (fault-call:0 fault-nth:7): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1024.546968] RIP: 0033:0x466459 [ 1024.546972] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1024.546982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1024.546987] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1024.546992] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1024.546997] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1024.547002] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 [ 1024.581649] FAULT_INJECTION: forcing a failure. [ 1024.581649] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.581673] CPU: 0 PID: 31855 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1024.581681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.581686] Call Trace: [ 1024.581703] dump_stack+0x1b2/0x281 [ 1024.581718] should_fail.cold+0x10a/0x149 [ 1024.581734] should_failslab+0xd6/0x130 [ 1024.581750] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1024.581767] apparmor_file_alloc_security+0x129/0x800 [ 1024.581786] security_file_alloc+0x66/0xa0 [ 1024.581799] ? selinux_is_enabled+0x5/0x50 [ 1024.581812] get_empty_filp+0x15c/0x3e0 [ 1024.581824] alloc_file+0x23/0x440 [ 1024.581840] __shmem_file_setup.part.0+0x198/0x3c0 [ 1024.581852] ? shmem_create+0x30/0x30 [ 1024.581869] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1024.581882] shmem_zero_setup+0xba/0x380 [ 1024.581898] mmap_region+0xf71/0x1220 [ 1024.581917] do_mmap+0x5b3/0xcb0 06:46:05 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0xe1a3, 0x6, 0x1b}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000008, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) [ 1024.581933] vm_mmap_pgoff+0x14e/0x1a0 [ 1024.581950] ? vma_is_stack_for_current+0xb0/0xb0 [ 1024.581967] SyS_mmap_pgoff+0x3c5/0x510 [ 1024.581980] ? find_mergeable_anon_vma+0x230/0x230 [ 1024.581990] ? __do_page_fault+0x159/0xad0 [ 1024.581999] ? do_syscall_64+0x4c/0x640 [ 1024.582008] ? align_vdso_addr+0x250/0x250 [ 1024.582018] do_syscall_64+0x1d5/0x640 [ 1024.582035] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.582052] RIP: 0033:0x466459 [ 1024.582058] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1024.582070] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1024.582077] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1024.582084] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1024.582090] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1024.582097] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1024.663861] FAULT_INJECTION: forcing a failure. [ 1024.663861] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.705377] FAULT_INJECTION: forcing a failure. [ 1024.705377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1024.734566] FAULT_INJECTION: forcing a failure. [ 1024.734566] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.800502] CPU: 0 PID: 31884 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1024.924274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1024.924279] Call Trace: [ 1024.924297] dump_stack+0x1b2/0x281 [ 1024.924310] should_fail.cold+0x10a/0x149 [ 1024.944095] __alloc_pages_nodemask+0x22c/0x2720 06:46:05 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1024.948863] ? __kernel_text_address+0x9/0x30 [ 1024.953395] ? unwind_get_return_address+0x51/0x90 [ 1024.958330] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1024.963702] ? __save_stack_trace+0xa0/0x160 [ 1024.968132] ? depot_save_stack+0x10d/0x3f0 [ 1024.972467] ? kasan_kmalloc+0x139/0x160 [ 1024.976534] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1024.981404] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 1024.986278] ? apparmor_file_alloc_security+0x129/0x800 [ 1024.991672] ? security_file_alloc+0x66/0xa0 [ 1024.996087] ? get_empty_filp+0x15c/0x3e0 [ 1025.000485] ? alloc_file+0x23/0x440 [ 1025.004212] ? __shmem_file_setup.part.0+0x198/0x3c0 [ 1025.009319] ? shmem_zero_setup+0xba/0x380 [ 1025.013558] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.018926] ? kasan_kmalloc+0xeb/0x160 [ 1025.022913] ? kmem_cache_alloc+0x124/0x3c0 [ 1025.027248] ? trace_hardirqs_on+0x10/0x10 [ 1025.031489] ? __lock_acquire+0x5fc/0x3f20 [ 1025.035729] alloc_pages_current+0x155/0x260 [ 1025.040152] pte_alloc_one+0x15/0x100 [ 1025.043968] do_fault_around+0x3f1/0x620 06:46:05 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) [ 1025.048036] __handle_mm_fault+0x2b1f/0x4620 [ 1025.052446] ? vm_insert_page+0x7c0/0x7c0 [ 1025.056634] handle_mm_fault+0x391/0x860 [ 1025.060717] __get_user_pages+0x445/0x11d0 [ 1025.064955] ? follow_page_mask+0x18a0/0x18a0 [ 1025.069491] ? memset+0x20/0x40 [ 1025.072793] populate_vma_page_range+0x17b/0x210 [ 1025.077564] __mm_populate+0x195/0x2c0 [ 1025.081463] ? populate_vma_page_range+0x210/0x210 [ 1025.086430] vm_mmap_pgoff+0x18f/0x1a0 [ 1025.090331] ? vma_is_stack_for_current+0xb0/0xb0 [ 1025.095184] SyS_mmap_pgoff+0x3c5/0x510 [ 1025.099271] ? find_mergeable_anon_vma+0x230/0x230 [ 1025.104204] ? __do_page_fault+0x159/0xad0 [ 1025.108527] ? do_syscall_64+0x4c/0x640 [ 1025.112527] ? align_vdso_addr+0x250/0x250 [ 1025.116774] do_syscall_64+0x1d5/0x640 [ 1025.120696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.125889] RIP: 0033:0x466459 [ 1025.129092] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1025.136985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 06:46:05 executing program 3: ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7, 0x4, 0x0, 0x100}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 06:46:05 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x1, 0x4000010, 0xffffffffffffffff, 0x82000000) mmap$dsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000004, 0x4000010, 0xffffffffffffffff, 0x0) [ 1025.144256] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1025.151618] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1025.158889] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1025.166164] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1025.173461] CPU: 1 PID: 31871 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1025.181605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.190961] Call Trace: [ 1025.193561] dump_stack+0x1b2/0x281 [ 1025.197300] should_fail.cold+0x10a/0x149 [ 1025.201457] should_failslab+0xd6/0x130 [ 1025.205443] kmem_cache_alloc+0x28e/0x3c0 [ 1025.209604] get_empty_filp+0x86/0x3e0 [ 1025.213544] alloc_file+0x23/0x440 [ 1025.218161] __shmem_file_setup.part.0+0x198/0x3c0 [ 1025.223113] ? shmem_create+0x30/0x30 [ 1025.227009] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1025.233420] shmem_zero_setup+0xba/0x380 [ 1025.237674] mmap_region+0xf71/0x1220 [ 1025.241858] do_mmap+0x5b3/0xcb0 [ 1025.245248] vm_mmap_pgoff+0x14e/0x1a0 06:46:05 executing program 1: ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x6001c0, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2cf1ff00", @ANYRES16=0x0, @ANYBLOB="020025bd7000fcdbdf250a000000050033000000000008002c00030000000800340001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) [ 1025.249846] ? vma_is_stack_for_current+0xb0/0xb0 [ 1025.254713] SyS_mmap_pgoff+0x3c5/0x510 [ 1025.258710] ? find_mergeable_anon_vma+0x230/0x230 [ 1025.263654] ? __do_page_fault+0x159/0xad0 [ 1025.267901] ? do_syscall_64+0x4c/0x640 [ 1025.271882] ? align_vdso_addr+0x250/0x250 [ 1025.276146] do_syscall_64+0x1d5/0x640 [ 1025.280052] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.285248] RIP: 0033:0x466459 [ 1025.288453] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:46:05 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000d00000005401b0000000000000356536738800e6573eaf0cd5f09d0e702ee0e55fd47763436e11f03db511e2a6e79b9469629c2ea66717286a18b8461ceeb2485c0772c2db2d06698a88d3f7eb4ee21be79c3f5b69af2e28d37ef3e71ac0c3bd1ff84c8e793757235cc1bd9d693abc900000000000003ffced104533f0b4a591003e65e995f5476ac76799ba2e35cd13a7d408982df82703ba4811ae9be594cd3958e13cbecaaba2c1f846a0573965a2ace112d29495e3feae6d5d87c1cba29a4a6352a440d4f4fadd9ae00"/232], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40001020}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) [ 1025.296337] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1025.303713] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1025.310992] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1025.318266] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1025.325629] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1025.342147] CPU: 1 PID: 31888 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 1025.350074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.359523] Call Trace: [ 1025.361651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1025.362120] dump_stack+0x1b2/0x281 [ 1025.362134] should_fail.cold+0x10a/0x149 [ 1025.378593] should_failslab+0xd6/0x130 [ 1025.382595] kmem_cache_alloc+0x28e/0x3c0 [ 1025.386771] ptlock_alloc+0x1d/0x70 [ 1025.390432] pte_alloc_one+0x57/0x100 [ 1025.394236] do_fault_around+0x3f1/0x620 [ 1025.397793] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1025.398298] __handle_mm_fault+0x2b1f/0x4620 [ 1025.411287] ? vm_insert_page+0x7c0/0x7c0 [ 1025.415462] handle_mm_fault+0x391/0x860 [ 1025.419538] __get_user_pages+0x445/0x11d0 [ 1025.423792] ? follow_page_mask+0x18a0/0x18a0 [ 1025.428314] ? memset+0x20/0x40 [ 1025.431606] populate_vma_page_range+0x17b/0x210 [ 1025.436380] __mm_populate+0x195/0x2c0 [ 1025.440293] ? populate_vma_page_range+0x210/0x210 [ 1025.445525] vm_mmap_pgoff+0x18f/0x1a0 [ 1025.449427] ? vma_is_stack_for_current+0xb0/0xb0 [ 1025.454386] SyS_mmap_pgoff+0x3c5/0x510 [ 1025.458379] ? find_mergeable_anon_vma+0x230/0x230 [ 1025.463325] ? __do_page_fault+0x159/0xad0 [ 1025.467572] ? do_syscall_64+0x4c/0x640 [ 1025.471639] ? align_vdso_addr+0x250/0x250 [ 1025.475882] do_syscall_64+0x1d5/0x640 [ 1025.479977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.485183] RIP: 0033:0x466459 [ 1025.488380] RSP: 002b:00007f64cc9f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 06:46:06 executing program 0 (fault-call:0 fault-nth:6): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:06 executing program 4 (fault-call:0 fault-nth:8): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:06 executing program 3: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfffffffffffffff8, &(0x7f0000ffc000/0x2000)=nil, 0x4) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/245) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0)='802.15.4 MAC\x00', 0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x108, &(0x7f0000ffb000/0x4000)=nil) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1810280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x85}, 0x4010) 06:46:06 executing program 1: ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x2, 0x2, 0x4, 0x0, 0x3f}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000280)=""/99) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x7b0, 0x4000) 06:46:06 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4002, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) shmget(0x3, 0x2000, 0x78000404, &(0x7f0000ffd000/0x2000)=nil) 06:46:06 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xd7, 0x585002) [ 1025.496088] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1025.503341] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1025.510597] RBP: 00007f64cc9f91d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1025.517873] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1025.525245] R13: 00007ffd1820255f R14: 00007f64cc9f9300 R15: 0000000000022000 06:46:06 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fed000/0x11000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000feb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000)="c5ed9f0333f825eacaaaba3c2e2a07d33a076862bedc3672d38fa981865207e618d16ea316a68ffa992933745e4542ce252da50408d8c337180fdf723861e5b53cbcf12de15a01752cd9388d7715c9bca6a2a91e3cefa9815eedf9aae3736ad699a6e3ee076f3cd76dbea2918b7394a4dd826b93d952b87c0f3bf298f889f6f2d0ec10a0dfc11dec186df732fc9ed63fc1d1cc98b9c2b80580f2947508e8d1255987f89b64d61bb916d9a11a5247fa590348b638a9fe4e7b87b837fd721b95f8acd766f74dc4cda413691d923179026201c1238a4459afebd20a19f5995451", 0xdf, r0}, 0x68) [ 1025.595782] FAULT_INJECTION: forcing a failure. [ 1025.595782] name failslab, interval 1, probability 0, space 0, times 0 06:46:06 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000000)) [ 1025.639305] FAULT_INJECTION: forcing a failure. [ 1025.639305] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.643177] CPU: 1 PID: 31959 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1025.658428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.668741] Call Trace: [ 1025.671342] dump_stack+0x1b2/0x281 [ 1025.675860] should_fail.cold+0x10a/0x149 [ 1025.680027] should_failslab+0xd6/0x130 [ 1025.684012] kmem_cache_alloc+0x28e/0x3c0 [ 1025.688185] ptlock_alloc+0x1d/0x70 [ 1025.691816] pte_alloc_one+0x57/0x100 [ 1025.695629] do_fault_around+0x3f1/0x620 [ 1025.699692] __handle_mm_fault+0x2b1f/0x4620 [ 1025.704107] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1025.709130] ? vm_insert_page+0x7c0/0x7c0 [ 1025.713285] ? finish_task_switch+0x178/0x610 [ 1025.717801] handle_mm_fault+0x391/0x860 [ 1025.721869] __get_user_pages+0x445/0x11d0 [ 1025.726113] ? follow_page_mask+0x18a0/0x18a0 [ 1025.730626] ? memset+0x20/0x40 [ 1025.733945] populate_vma_page_range+0x17b/0x210 06:46:06 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0xf, 0x4000010, 0xffffffffffffffff, 0x82000000) [ 1025.738725] __mm_populate+0x195/0x2c0 [ 1025.742620] ? populate_vma_page_range+0x210/0x210 [ 1025.747562] vm_mmap_pgoff+0x18f/0x1a0 [ 1025.751469] ? vma_is_stack_for_current+0xb0/0xb0 [ 1025.756316] SyS_mmap_pgoff+0x3c5/0x510 [ 1025.760300] ? find_mergeable_anon_vma+0x230/0x230 [ 1025.765229] ? __do_page_fault+0x159/0xad0 [ 1025.769465] ? do_syscall_64+0x4c/0x640 [ 1025.773524] ? align_vdso_addr+0x250/0x250 [ 1025.777845] do_syscall_64+0x1d5/0x640 [ 1025.781741] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.786939] RIP: 0033:0x466459 06:46:06 executing program 3: socketpair(0x5, 0xa, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="d6e0d35dd8fced6eb0fcd2865827fc0fd05cd5c05740e97824ba20b822751f51853a063940c0812023e56d5b0c3bf2761cf6c9e419a61bfe4b7bf5ea5d5dc3aa670477b8", 0x44, r0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2aa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040}, 0x40040d0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1025.790149] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1025.797861] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1025.805137] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1025.812413] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1025.819690] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1025.826982] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 [ 1025.834276] CPU: 0 PID: 31973 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1025.842180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1025.851561] Call Trace: [ 1025.854169] dump_stack+0x1b2/0x281 [ 1025.857812] should_fail.cold+0x10a/0x149 [ 1025.861996] should_failslab+0xd6/0x130 [ 1025.865990] kmem_cache_alloc_trace+0x29a/0x3d0 [ 1025.870680] apparmor_file_alloc_security+0x129/0x800 [ 1025.875890] security_file_alloc+0x66/0xa0 [ 1025.880141] ? selinux_is_enabled+0x5/0x50 [ 1025.884426] get_empty_filp+0x15c/0x3e0 [ 1025.888417] alloc_file+0x23/0x440 [ 1025.891972] __shmem_file_setup.part.0+0x198/0x3c0 [ 1025.896925] ? shmem_create+0x30/0x30 [ 1025.900751] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1025.906223] shmem_zero_setup+0xba/0x380 [ 1025.910464] mmap_region+0xf71/0x1220 [ 1025.914290] do_mmap+0x5b3/0xcb0 [ 1025.917697] vm_mmap_pgoff+0x14e/0x1a0 [ 1025.921601] ? vma_is_stack_for_current+0xb0/0xb0 [ 1025.926466] SyS_mmap_pgoff+0x3c5/0x510 [ 1025.930460] ? find_mergeable_anon_vma+0x230/0x230 [ 1025.935410] ? __do_page_fault+0x159/0xad0 06:46:06 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0xca22], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x82000000) 06:46:06 executing program 4 (fault-call:0 fault-nth:9): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1025.939689] ? do_syscall_64+0x4c/0x640 [ 1025.943678] ? align_vdso_addr+0x250/0x250 [ 1025.947932] do_syscall_64+0x1d5/0x640 [ 1025.951841] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1025.957154] RIP: 0033:0x466459 [ 1025.960351] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1025.962601] FAULT_INJECTION: forcing a failure. [ 1025.962601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1025.968072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 06:46:06 executing program 0 (fault-call:0 fault-nth:7): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:06 executing program 2: sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008841}, 0x4) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:06 executing program 1: socketpair(0x3, 0x3, 0x7, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:06 executing program 5: mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x200000e, 0x100010, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x10010, 0xffffffffffffffff, 0x981b7000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00', r0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1c8, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2be9c0630e842984}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x3d}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4840}, 0x20000040) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff00}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x2800) [ 1025.968078] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1025.968083] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1025.968088] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1025.968092] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 06:46:06 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dec31b82bdbdf250100000006c532d7000a009fb4897c9486c077ffff000006000a00ffff000006000a00ffff000006000a00000000002d9fae2068dc1378"], 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x20028810) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb, 0x20010, 0xffffffffffffffff, 0x82000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 06:46:06 executing program 2: pselect6(0x40, &(0x7f0000000180)={0x8001, 0x2, 0x7fffffff, 0x3, 0x2, 0x4, 0x5}, &(0x7f00000001c0)={0x1, 0x7fffffff, 0xffffffffffff86ba, 0x5, 0x20, 0x10001, 0x10001, 0xffffffffffff7fff}, &(0x7f0000000200)={0x1, 0x4, 0x8, 0x5, 0x72, 0x0, 0x3}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x8000]}, 0x8}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ae753b959fb5bb8f93e4df167fa0e993"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}, @NL80211_ATTR_SSID={0x1a, 0x34, @random="1a24eff152dde695f7394045f7f734d0052a56698f71"}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000}, 0x40041) 06:46:06 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x0], 0x2, 0x40800, 0x0, 0xffffffffffffffff}) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) [ 1026.085046] FAULT_INJECTION: forcing a failure. [ 1026.085046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1026.142514] CPU: 1 PID: 32031 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1026.150541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.159942] Call Trace: [ 1026.162542] dump_stack+0x1b2/0x281 [ 1026.166213] should_fail.cold+0x10a/0x149 [ 1026.170379] __alloc_pages_nodemask+0x22c/0x2720 [ 1026.175156] ? __kernel_text_address+0x9/0x30 [ 1026.179699] ? unwind_get_return_address+0x51/0x90 [ 1026.184641] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb 06:46:06 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x37024cbed861b039}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x20, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x9200}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000004}, 0x20000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:06 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x24}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x5}}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x7f}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xff}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc, 0x6}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4854}, 0x20040004) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff0000/0x10000)=nil, 0x10000}, &(0x7f0000000040)=0x10) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1026.190017] ? __save_stack_trace+0xa0/0x160 [ 1026.194582] ? depot_save_stack+0x10d/0x3f0 [ 1026.198950] ? kasan_kmalloc+0x139/0x160 [ 1026.203029] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1026.207891] ? kmem_cache_alloc_trace+0x131/0x3d0 [ 1026.212772] ? apparmor_file_alloc_security+0x129/0x800 [ 1026.218153] ? security_file_alloc+0x66/0xa0 [ 1026.222586] ? get_empty_filp+0x15c/0x3e0 [ 1026.226752] ? alloc_file+0x23/0x440 [ 1026.230483] ? __shmem_file_setup.part.0+0x198/0x3c0 [ 1026.235600] ? shmem_zero_setup+0xba/0x380 06:46:06 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x1, 0x4, 0xb912, 0xffff8000, 0xfd3, 0x401, 0x1}) 06:46:06 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x1000007, 0x8010, r0, 0x82000000) [ 1026.239855] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.245238] ? kasan_kmalloc+0xeb/0x160 [ 1026.249236] ? kmem_cache_alloc+0x124/0x3c0 [ 1026.253697] ? trace_hardirqs_on+0x10/0x10 [ 1026.257952] ? __lock_acquire+0x5fc/0x3f20 [ 1026.262213] alloc_pages_current+0x155/0x260 [ 1026.266674] pte_alloc_one+0x15/0x100 [ 1026.270502] do_fault_around+0x3f1/0x620 [ 1026.274626] __handle_mm_fault+0x2b1f/0x4620 [ 1026.279072] ? vm_insert_page+0x7c0/0x7c0 [ 1026.283258] handle_mm_fault+0x391/0x860 [ 1026.287344] __get_user_pages+0x445/0x11d0 [ 1026.291603] ? follow_page_mask+0x18a0/0x18a0 [ 1026.296126] ? memset+0x20/0x40 [ 1026.299433] populate_vma_page_range+0x17b/0x210 [ 1026.304218] __mm_populate+0x195/0x2c0 [ 1026.308136] ? populate_vma_page_range+0x210/0x210 [ 1026.313109] vm_mmap_pgoff+0x18f/0x1a0 [ 1026.317026] ? vma_is_stack_for_current+0xb0/0xb0 [ 1026.321892] SyS_mmap_pgoff+0x3c5/0x510 [ 1026.325896] ? find_mergeable_anon_vma+0x230/0x230 [ 1026.330851] ? __do_page_fault+0x159/0xad0 [ 1026.335107] ? do_syscall_64+0x4c/0x640 [ 1026.339097] ? align_vdso_addr+0x250/0x250 [ 1026.343352] do_syscall_64+0x1d5/0x640 [ 1026.347268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.352477] RIP: 0033:0x466459 [ 1026.355686] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1026.363414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1026.370696] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1026.378005] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1026.385300] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1026.392584] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1026.401587] CPU: 1 PID: 32008 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 1026.409495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.418877] Call Trace: [ 1026.421496] dump_stack+0x1b2/0x281 [ 1026.425137] should_fail.cold+0x10a/0x149 [ 1026.429327] __alloc_pages_nodemask+0x22c/0x2720 [ 1026.434113] ? __lock_acquire+0x5fc/0x3f20 [ 1026.438418] ? unwind_next_frame+0xe54/0x17d0 [ 1026.442955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1026.447985] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1026.453918] ? __lock_acquire+0x5fc/0x3f20 [ 1026.458216] ? is_bpf_text_address+0x91/0x150 [ 1026.462752] alloc_pages_vma+0xd2/0x6d0 [ 1026.466783] shmem_alloc_page+0xe0/0x180 [ 1026.470869] ? shmem_swapin+0x180/0x180 [ 1026.474852] ? __kernel_text_address+0x9/0x30 [ 1026.479493] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1026.484194] ? find_get_entry+0x312/0x630 [ 1026.488349] ? find_get_entry+0x339/0x630 [ 1026.492670] shmem_alloc_and_acct_page+0x126/0x620 [ 1026.497606] shmem_getpage_gfp+0x302/0x28f0 [ 1026.501940] ? shmem_alloc_and_acct_page+0x620/0x620 [ 1026.507060] ? filemap_map_pages+0x51b/0xe40 [ 1026.511475] shmem_fault+0x1dd/0x5e0 [ 1026.515201] ? generic_file_mmap+0x140/0x140 [ 1026.519712] ? shmem_read_mapping_page_gfp+0x130/0x130 [ 1026.525014] ? __lockdep_init_map+0x100/0x560 [ 1026.529696] ? __raw_spin_lock_init+0x28/0x100 [ 1026.534283] __do_fault+0xfa/0x380 [ 1026.537820] __handle_mm_fault+0x2497/0x4620 [ 1026.542234] ? vm_insert_page+0x7c0/0x7c0 [ 1026.546529] handle_mm_fault+0x391/0x860 [ 1026.550654] __get_user_pages+0x445/0x11d0 [ 1026.554917] ? follow_page_mask+0x18a0/0x18a0 [ 1026.559415] ? memset+0x20/0x40 [ 1026.562836] populate_vma_page_range+0x17b/0x210 [ 1026.567615] __mm_populate+0x195/0x2c0 [ 1026.571531] ? populate_vma_page_range+0x210/0x210 [ 1026.576473] vm_mmap_pgoff+0x18f/0x1a0 [ 1026.580360] ? vma_is_stack_for_current+0xb0/0xb0 [ 1026.585232] SyS_mmap_pgoff+0x3c5/0x510 [ 1026.589212] ? find_mergeable_anon_vma+0x230/0x230 [ 1026.594141] ? __do_page_fault+0x159/0xad0 [ 1026.598520] ? do_syscall_64+0x4c/0x640 [ 1026.602709] ? align_vdso_addr+0x250/0x250 [ 1026.606984] do_syscall_64+0x1d5/0x640 [ 1026.610884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.616178] RIP: 0033:0x466459 [ 1026.619385] RSP: 002b:00007f56235ea188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1026.627092] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1026.634374] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 06:46:07 executing program 4 (fault-call:0 fault-nth:10): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 0 (fault-call:0 fault-nth:8): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4) 06:46:07 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x1000000, 0x4000010, r0, 0x82000000) 06:46:07 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x6}, 0x2) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:46:07 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x486c2, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x1, 0x5a35b892}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1026.641645] RBP: 00007f56235ea1d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1026.648918] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000002 [ 1026.656192] R13: 00007ffed5502cbf R14: 00007f56235ea300 R15: 0000000000022000 06:46:07 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x210640, 0x0) openat$cgroup_procs(r1, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="12072cbd7000fddbdf255700000008000300", @ANYRES32=0x0, @ANYBLOB="06009500f60800000600950001040000060095007f000000060095004000000006009500f7ff000006009500faff00000600950000e00000060095000100000006009500fd0700001c5bcf149a1058f4c7aea8c3"], 0x64}, 0x1, 0x0, 0x0, 0x8040050}, 0x8001) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, r0, 0xd72ac000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c001}, 0x890) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "55009b9adcc9ea4fc78bef2225a3271e5928e3ae15e08b0985f6561153be6a62"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x50) [ 1026.770583] FAULT_INJECTION: forcing a failure. [ 1026.770583] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.826510] CPU: 0 PID: 32090 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1026.834482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1026.843850] Call Trace: [ 1026.846461] dump_stack+0x1b2/0x281 [ 1026.850113] should_fail.cold+0x10a/0x149 [ 1026.854295] should_failslab+0xd6/0x130 [ 1026.858298] kmem_cache_alloc+0x28e/0x3c0 [ 1026.862478] ptlock_alloc+0x1d/0x70 [ 1026.866133] pte_alloc_one+0x57/0x100 [ 1026.869970] do_fault_around+0x3f1/0x620 [ 1026.874060] __handle_mm_fault+0x2b1f/0x4620 [ 1026.878643] ? vm_insert_page+0x7c0/0x7c0 [ 1026.882839] handle_mm_fault+0x391/0x860 [ 1026.886951] __get_user_pages+0x445/0x11d0 [ 1026.891222] ? follow_page_mask+0x18a0/0x18a0 [ 1026.895752] ? memset+0x20/0x40 [ 1026.899055] populate_vma_page_range+0x17b/0x210 [ 1026.903847] __mm_populate+0x195/0x2c0 [ 1026.907777] ? populate_vma_page_range+0x210/0x210 [ 1026.912948] vm_mmap_pgoff+0x18f/0x1a0 [ 1026.916925] ? vma_is_stack_for_current+0xb0/0xb0 [ 1026.921812] SyS_mmap_pgoff+0x3c5/0x510 [ 1026.925841] ? find_mergeable_anon_vma+0x230/0x230 [ 1026.930830] ? __do_page_fault+0x159/0xad0 [ 1026.935096] ? do_syscall_64+0x4c/0x640 [ 1026.939121] ? align_vdso_addr+0x250/0x250 [ 1026.943388] do_syscall_64+0x1d5/0x640 [ 1026.947316] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1026.952644] RIP: 0033:0x466459 [ 1026.955858] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1026.963593] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 06:46:07 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 06:46:07 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x9, 0xcb1f, 0x7, 0xe134, 0x8, 0x7}) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x446, 0x80002) mmap$usbmon(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r1, 0x6) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200800, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000004, 0x80010, r2, 0x7f818000) 06:46:07 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[0x1, 0x8]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) move_pages(r3, 0x5, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000100)=[0x553d, 0xc0, 0x8, 0x8, 0x6, 0x1, 0x80000000, 0x1], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x82000000) 06:46:07 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6a93cea307028cab87ca68000000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fbdbdf25010000000000000009410000004c0018ffffffff73797a300000000000000000000000000000000000000000000000000000000000000000000000003998dadb2df96ede9cfa0000000000000000d4a0b45b000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4008090) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x5, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20040894) r0 = socket(0x1d, 0x2, 0x7f) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x250, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x100, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x0e.]}*\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ',)^^(!}#\':)]&}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%!\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#)!\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x11}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf7&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf7&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',{-+/{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x728}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x114, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@]-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3eb55d32}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'v\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, ',)^^(!}#\':)]&}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#)!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf7&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x8e[{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x699db772}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+!w,]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '/\'-#,\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',{-+/{\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044880}, 0x80) [ 1026.970951] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1026.978254] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 [ 1026.985548] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000001 [ 1026.992831] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 06:46:07 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x40}}, 0x10) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x8, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 0 (fault-call:0 fault-nth:9): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00', r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x583], 0x1, 0x800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) 06:46:07 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 06:46:07 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000000)={0x0, 0x7, 0x7, 0x2, 0x8, 0x9, 0x0, 0x5, 0xb301410, 0xffffffff, 0x7, 0x5}) [ 1027.220570] FAULT_INJECTION: forcing a failure. [ 1027.220570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 06:46:07 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) socketpair(0x2a, 0x1, 0x7, &(0x7f0000002a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000002ac0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003100)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000003280)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003240)={&(0x7f0000003140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250f0000000d0001800800030002000000080003000200000020000180140002006970766c616e3100000000000000000008000300030000002400018008000100", @ANYRES32=r3, @ANYBLOB="080003000100000008000100", @ANYRES32=r4, @ANYBLOB="3aff0300030000002000018008000300020000001400020064756d6d7930000000000000000000004400018001000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003001bcb21521400020076657468315f746f5f687372000000000000030002000e00"], 0xd0}, 0x1, 0x0, 0x0, 0x4000804}, 0x10) 06:46:07 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffa000/0x3000)=nil) 06:46:07 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 06:46:07 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp_control(&(0x7f0000ff7000/0x3000)=nil, 0x1000, 0x8, 0x110, 0xffffffffffffffff, 0x83000000) [ 1027.340118] CPU: 0 PID: 32156 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1027.348173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.357547] Call Trace: [ 1027.360152] dump_stack+0x1b2/0x281 [ 1027.363802] should_fail.cold+0x10a/0x149 [ 1027.367980] __alloc_pages_nodemask+0x22c/0x2720 [ 1027.372766] ? __lock_acquire+0x5fc/0x3f20 [ 1027.377032] ? trace_hardirqs_on+0x10/0x10 [ 1027.381285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1027.386149] ? check_preemption_disabled+0x35/0x240 [ 1027.391215] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1027.397130] ? __lock_acquire+0x5fc/0x3f20 [ 1027.401404] ? is_bpf_text_address+0x91/0x150 [ 1027.405934] alloc_pages_vma+0xd2/0x6d0 [ 1027.409937] shmem_alloc_page+0xe0/0x180 [ 1027.414034] ? shmem_swapin+0x180/0x180 [ 1027.418057] ? __kernel_text_address+0x9/0x30 [ 1027.422580] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1027.427218] ? find_get_entry+0x312/0x630 [ 1027.431395] ? find_get_entry+0x339/0x630 [ 1027.435575] shmem_alloc_and_acct_page+0x126/0x620 06:46:07 executing program 5: pkey_mprotect(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x6, 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/255) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ff9000/0x1000)=nil, 0x1000}) [ 1027.440545] shmem_getpage_gfp+0x302/0x28f0 [ 1027.444933] ? shmem_alloc_and_acct_page+0x620/0x620 [ 1027.450058] ? filemap_map_pages+0x51b/0xe40 [ 1027.454495] shmem_fault+0x1dd/0x5e0 [ 1027.458242] ? generic_file_mmap+0x140/0x140 [ 1027.462676] ? shmem_read_mapping_page_gfp+0x130/0x130 [ 1027.467991] ? __lockdep_init_map+0x100/0x560 [ 1027.468005] ? __raw_spin_lock_init+0x28/0x100 [ 1027.468018] __do_fault+0xfa/0x380 [ 1027.468029] __handle_mm_fault+0x2497/0x4620 [ 1027.468039] ? trace_hardirqs_on_caller+0x3a8/0x580 06:46:07 executing program 2: mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3000007, 0x8010, 0xffffffffffffffff, 0x82000000) 06:46:07 executing program 1: mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000008, 0x13, 0xffffffffffffffff, 0x83000000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x1000002, 0x4010, r0, 0x83000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 1027.468046] ? vm_insert_page+0x7c0/0x7c0 [ 1027.468054] ? finish_task_switch+0x178/0x610 [ 1027.468072] handle_mm_fault+0x391/0x860 [ 1027.468083] __get_user_pages+0x445/0x11d0 [ 1027.468098] ? follow_page_mask+0x18a0/0x18a0 [ 1027.468117] ? memset+0x20/0x40 [ 1027.514944] populate_vma_page_range+0x17b/0x210 [ 1027.519729] __mm_populate+0x195/0x2c0 [ 1027.523637] ? populate_vma_page_range+0x210/0x210 [ 1027.528618] vm_mmap_pgoff+0x18f/0x1a0 [ 1027.528632] ? vma_is_stack_for_current+0xb0/0xb0 06:46:08 executing program 0 (fault-call:0 fault-nth:10): mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = getpid() ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ff9000/0x3000)=nil, 0x3000}}) sched_rr_get_interval(r0, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) [ 1027.528647] SyS_mmap_pgoff+0x3c5/0x510 06:46:08 executing program 3: ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000000)={0x80000000, 0x5, 0x3, 0x6}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x3000)=nil, 0x7, 0x5, 0x80}) shmget(0x3, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 2: clock_gettime(0x0, &(0x7f0000000000)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1027.528658] ? find_mergeable_anon_vma+0x230/0x230 [ 1027.528667] ? __do_page_fault+0x159/0xad0 06:46:08 executing program 1: sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) [ 1027.528676] ? do_syscall_64+0x4c/0x640 [ 1027.528684] ? align_vdso_addr+0x250/0x250 06:46:08 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x200000e, 0x100010, 0xffffffffffffffff, 0xd000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 06:46:08 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x400) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224be, r1, 0x82000000) 06:46:08 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="de0228bd7000fedb5f2506000000050029000000000008003100ff0f000008003a000600000008000b00ff000000080034008000000008003c00dd7e0000080031008500000005002d0002000000fed5fef29bcc49accde652fd90883e15d7eddae1faddce62d5f0faf38d1ccd88f1772f81bbc12796d4ce227c945dcf613fb784d6aea3bfbe0a12df953996d453cda91fed95592cde692687fdadadb501b7041328fa00256ca0464c8ff0b493b4"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x400c081) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x0, 0x10, r0, 0x83000000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) [ 1027.528692] do_syscall_64+0x1d5/0x640 06:46:08 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = userfaultfd(0x80000) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ff9000/0x3000)=nil, 0x3000}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000180)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d861c2ea2dfa8b5df1fa96e000006000800a3db139f28b657e2d609333a3a7039a144293079850edc0716851d811e51555f06934fd09be035f49d1339c55dfca053aa31063fc0217be2a5d1f9c5eac5af11f7ca659d51448ce115decde3994e947bf34df6aae90ebe8e69774893bd9ddd3d47db9ad64ab0e3e0009c0cffa77bd409c6f98b"], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r4) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, r5, 0x1}, 0xfffffffffffffe55}}, 0x4000091) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffdb4, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x400c000) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0)=[0x365, 0x80000000, 0x7ffffffc, 0x2, 0x7fffffff, 0x1, 0x9, 0x657a], 0x8, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) [ 1027.528706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1027.528714] RIP: 0033:0x466459 [ 1027.528718] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1027.528726] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1027.528730] RDX: 000000000200000e RSI: 0000000000001000 RDI: 0000000020ff9000 [ 1027.528735] RBP: 00007f7db47831d0 R08: ffffffffffffffff R09: 0000000082000000 06:46:08 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf251300000006000800000000000c0009000200aaaaaaaaaaaa06000800ff020000"], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x4000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) getpgid(0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4000002}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00'}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x800, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c015) getsockname(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000002c0)=0xc4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockname(r0, &(0x7f0000000080)=@in={0x2, 0x0, @initdev}, &(0x7f0000000340)=0x80) openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000040)={0x1, 0x10000, 0x2, 0xad}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0xfffffff7, 0x401], 0x2, 0x800, 0x0, 0xffffffffffffffff}) r4 = getpgid(0x0) write$cgroup_pid(r3, &(0x7f0000000200)=r4, 0x12) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000580)='mptcp_pm\x00', r5) 06:46:08 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0xdc8c1000) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x4, 0x7fffffff, 0x0, 0x0, 0x9, 0x2], 0x6, 0x1, 0x3ff, 0x3ff, 0x800008c, 0x101, 0xfffffff9, {0x8, 0x3ff, 0x6, 0x8001, 0x1, 0x8, 0x5, 0x8, 0x80, 0x3, 0x0, 0x7ff, 0x5, 0x254a, "7c07cca954b4067f1eb600000000000000000000000015fd00"}}) 06:46:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x840) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x12000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffffff64}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000891}, 0x4000) 06:46:08 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10040040}, 0x8804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240), 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)={0x1ec, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_START_REQ(r5, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r9, 0x1, 0x800, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1027.528739] R10: 91d632c8b9e224b1 R11: 0000000000000246 R12: 0000000000000002 [ 1027.528744] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1027.854083] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1027.867666] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 06:46:08 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x3, 0x4) 06:46:08 executing program 2: bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x76}, 0xa) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 5: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0xfffffffa, 0x4e52, 0x400003f, 0x81], 0x4, 0x80000}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000000c0)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9, 0x10000) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x8010, r2, 0xa000) 06:46:08 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40200, 0x0) 06:46:08 executing program 0: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x4}, 0x2) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 2: ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0xa911) mmap$snddsp_status(&(0x7f0000ff9000/0x5000)=nil, 0x1000, 0x1000000, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xbddf9000) 06:46:08 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x102, 0x101042) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x2d41, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0x83000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x200000c, 0x80010, r0, 0x82000000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x5971c1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) 06:46:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000040)={0x4, 0x3ff80, 0x7, 0x5}) 06:46:08 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', r0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xa0ec0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x1000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x50, 0xffffffffffffffff, 0x82000000) msync(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x7) 06:46:08 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/57}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000140)={0x0, 0x80000000}) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000007, 0x1010, 0xffffffffffffffff, 0x82000000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r4, 0x35e4b000) 06:46:08 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x300000c, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x89, 0x2, 0x3f, 0x2, 0x3], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3000003, 0x30, r0, 0x83000000) 06:46:08 executing program 0: mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x200000e, 0x13, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000080)={0x40000000, 0x84, 0x18}) 06:46:08 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff7000/0x4000)=nil, 0xd000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 06:46:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0)='802.15.4 MAC\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80006}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0xef}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3f}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x7}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xfffffffb}]}, 0x60}, 0x1, 0x0, 0x0, 0x8084}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1a0, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x184, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x85, 0x3, "a8a9ac7012062190ecfa5a2f078fc660d5d8e75fea85904674acd651a8ba0e23830ee42b9716becca748377342b9f7e38737ed3ebcae7d736a1c3ecee4747bd23eb1018c8caf385090dd6e5e04070782e727a6617e2f0b9eb6d89cd8c0354b414e713e8c9c1a0f8351dfc70ae23c9bc3ab16333846c19cf948da45148e442b6cd2"}, @NL80211_FTM_RESP_ATTR_LCI={0xf6, 0x2, "6b9de20bd63a6e7d5dd4311543253431f3d8c171f29efa897bfae18218b084588f684e16b5b24d85db58dee085ba247e4a8a472fe583cd8ccb71b9a9ee2d6c63fee93ee04a50db27fd2c1f130700858ff00f238c880f7e80dd0665463c43fd27f58a3442bfe744681e3e97680134effb2c776ad8d63342485bdfc54239ce3f2b7c589858efe17993d7097f6c3d45b99fe952dc53879f29ca4c8d8415e81443c423110892731bb78c72878daa265e892f23483ad5dbbf91db8b172d3d12df4c10d6f36ea4894684f8c32ff2b43ba80b7364a5431edab6504e3f0a56d11c6d893b8e4aab27372f006a1d2f36234173f36b2331"}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x5, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)) 06:46:08 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="0f7b07000431107a127f15b33d1ec29acd9f506ee2cc9e6cd7cfd0ba2ba14a58c12acfb8f6d29f", @ANYRES16=r0, @ANYBLOB="020027bd7000ffdbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0a00f500fc0e231056b0000008009e00280300002c002c80080000000700000008000000ffffff7f080000006200000008000000a7f000000800000003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4895) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="324127bd7000ffdbdf25130000000600ab000800000005007400020000000500e4000100000038160e0481316f3e9e330902d2c5001d00adc0f3adaa5d45fd7ee08f624bfa027bda19e5d3dce3b490a70633fd87aeb359d2d083e991cb3bd9d8756fda475f7c087ce6fd6bdd416667d3a2c4e823796eda7441529285246c9935f7a69b336728"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x50) 06:46:08 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x2000)=nil, 0x2000}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}, @NL80211_ATTR_PMKID={0x14, 0x55, "95590a3d730dde03d99ae66b332301c1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="034287dd6f1b"}, @NL80211_ATTR_BSSID={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:08 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x5, 0x8, 0x0, 0x6, 0xa, 0x3}) 06:46:09 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1, 0x80010, r0, 0x82000000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 06:46:09 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$binder(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x128, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x15a0}, @TIPC_NLA_PUBL_TYPE={0x7, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x0, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0xfdb5, 0x2, 0x1}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa34e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x0, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x78}]}, 0x128}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r0, 0x3000) 06:46:09 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80200, 0x0) mmap$snddsp(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x3000004, 0x10, r0, 0x7000) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000400000/0xc00000)=nil, 0xc00000}, &(0x7f0000000080)=0x10) mmap$snddsp_status(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x200000e, 0x100010, r0, 0x82000000) 06:46:09 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000ffdbdf252800000005002b000300000006000600ffff00000c002d0000000000000000000c0000000000000000aaaaaa06000600ffff00000c0005000200aa0600aaaaaa0c0005000201aaaaaaaaaaaa"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ff8000/0x3000)=nil) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff8001, 0x0, 0x3c}) 06:46:09 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 06:46:09 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x10000}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x800, &(0x7f0000ff9000/0x4000)=nil, 0x4) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, r1) 06:46:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x2000)=nil, 0x2000}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1, 0x4000010, r0, 0x82000000) 06:46:09 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x300000d, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x20000000, 0x2, 0x37}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000080)={0x40, 0xa9, 0x200, 0x4, 0x5, 0x10001, 0x252}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8, 0x2, 0xffffff00, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1, 0x12, r0, 0x83000000) 06:46:09 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 06:46:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000000)=""/33}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x3000)=nil}) mmap$snddsp_status(&(0x7f0000ff9000/0x3000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 5: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a0, r0, 0xc00, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 0: bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88fb}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x2000)=nil}) shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1000002, 0x11, 0xffffffffffffffff, 0x83000000) 06:46:09 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x2000)=nil, 0x2000}, 0x1}) 06:46:09 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) fcntl$getown(r0, 0x9) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xc00, 0x0) 06:46:09 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x6, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8, 0x100010, r0, 0x3000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20800, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10697d2e53713270, 0x0, &(0x7f0000ffa000/0x2000)=nil}) 06:46:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x1, 0x12, r1, 0x82000000) 06:46:09 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r0) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x9, 0x2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0xa25) 06:46:09 executing program 5: mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000e, 0x10010, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x2, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40800) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="626d880278aa42bccdb362f47c902c650f5ce364986e89", @ANYRES16=r3, @ANYBLOB="010000000000000000000d00000005001b000000000006000a0000000000"], 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", ""]}, 0x14}}, 0x4000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x10, r0, 0x40) 06:46:09 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:46:09 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000a, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 4: write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffffff, 0x12) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x501001, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x3000000, 0x13, r1, 0x1000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000200)=""/249, &(0x7f0000000300)=0xf9) openat$vcs(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vcs\x00', 0x104342, 0x0) r3 = socket(0x0, 0x6, 0xfffffff9) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00', r0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x85) 06:46:09 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x210, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:09 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x6, 0x4010, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000007, 0x13, r0, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 06:46:09 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x12008}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022cbd7000fbdbdf25570000000c0099006200000055000000060095000800000006009500020000000600950001800000ae81516f382240d167e7e38573671e94df5461f8e2a309e3de2f3841d9196b91db899b2d0c6fa4fbb0741b889c43facd72790176e6aaea454cffb9871b43a4e1869522d3ef666081bfdadbe9b74710346c2f24b90e3ff6c8e5b6db28ec175736b17c7e1a9e8f4bb03541066ab477d4ce2ed42cc81ccca40a59e6b863837f5f035af590acfa9f1756cc8f0cd39f5fc7b2c8dec5e5cdc7f22ab8088b1e3882a1a7028d3741516eb5e8ededf97512ec65075b2f2f17fec00340c866dcb251153737201a10d2be8f716b707f9a83be7097e49555f43016bbe58aff9c89f94122b3b901a4347bc302135b51c24c0bc5791b015395afed8a5006c9f47b484ed0f32b6110282d961d7931dfbe469393c10a0e81be6483d049d88d1437374dbd46db2b900b35bcdbc3f0290d415a9008b1d697069ab346462bc657c0b3878e245600f6ada1e7f50ac30bedc05904afb9e6c89fd1d8513cea26f395fd32ffb153c3"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap$snddsp_status(&(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x82000000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00', r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', 0xffffffffffffffff) 06:46:09 executing program 2: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ea06000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x20008810}, 0x40000) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000881}, 0x8000) socketpair(0x9, 0x0, 0x3059, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4004840) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 1: sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800200c}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0xd0, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, [], 0x1}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x18}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x28}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x48040) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022abd7000ffdb8000002d00000004000000000000005cf13a937c0113760376f96485714e3ffca901ad3d0283007fa310920e4ae473ff0fffb94a0a2b14b9fd630e048331ad08aa53eadfc00bfeeb7144f7b75505c5051adfd5116985f3a5b18d876a3b12f106976ae97ae3e4b6ec48513bc53ef718bd0e78e780b28aa8a844ab0b3f391b559a8e3f23e05ca300"/157], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:09 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00', 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0900c9", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbdf25030000000c0009000201aaaaaaaaaaaa0c0009000201aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002dbd7000fbdbdf250300000008000100020000000800020002f3ff000800020002000000080002000200"/62], 0x44}, 0x1, 0x0, 0x0, 0x200000d4}, 0x840) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r3) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r7) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="deb6d14c0000"], 0x14}}, 0x20004011) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000f6", @ANYRES16=r8, @ANYBLOB="000828bd7000ffdbdf250200000008000200020000000800010002000000080001000000000008000200020000000800010003000000"], 0x3c}}, 0x4000000) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xc0001, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000600)='./file0/file0\x00', 0x0) 06:46:09 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x110, r1, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000100)={0x0, 0xffff, 0x400}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r2, 0x82000000) wait4(0xffffffffffffffff, &(0x7f00000000c0), 0x80000000, 0x0) 06:46:09 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x581000, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x4000002, 0x12, r0, 0x82000000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x208c00, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 06:46:09 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, 0xffffffffffffffff, 0x10000) 06:46:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)={0x9c8, r1, 0x9211637f5869e0b, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x13a, 0xf, [@cf={0x4, 0x6, {0x81, 0x0, 0xfff}}, @random={0x8, 0x91, "4708092c95c269b572bf0a067ebf69948bf409c89af27324d8d1cdb9f3c48e1063d31c9692217f0ac3c386527267f315da32188e92abd690034612b492556436d1407fc7cd78ef905abb0ca2b6538c76346ddb9db2a9b6cad9eb2b3a114e37a9de19fca725cd927a9670b4047583f6fc73867202f8dd944400a4c998744ee77b328d6504bb7181e59e3439403e34799e62"}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x1}}, @measure_req={0x26, 0x94, {0x1, 0x5, 0x80, "5bf582850534db75f2374046275636c67883ea888e4065224b7d8272ca91f4343c73552df3e3e6a337add6d029ae120fccf0221450558ab3ee51d5852918c6ec5a194b6334a92a9350a71cfd84eb728a2cdebe13c80cca55f765a686119ea0f6bfb0b9052bd0bf712d56161450b6a63a7e2b2d8e9c8433d6012e1862bfe96c8e344f86eabf6237d34198cf25616f022d69"}}]}, @NL80211_ATTR_BEACON_HEAD={0x537, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_a, @device_b, @from_mac, {0x5, 0x20}}, 0xffffffffffff7191, @random=0xd7, 0x1022, @void, @void, @void, @void, @void, @val={0x5, 0x28, {0x1c, 0xb4, 0x1, "084d58b69c1f80524770f3b22ba517c9e6624d5f2883aebad10a07d417117e4e8d6c48effe"}}, @val={0x25, 0x3, {0x1, 0x1, 0x8}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x480e, 0x1, 0x5, 0x0, {0x1ed, 0x7f, 0x0, 0x9, 0x0, 0x1, 0x0, 0x3}, 0x400, 0x524, 0x1a}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x8}}, @val={0x76, 0x6, {0x78, 0x7, 0x13, 0x1ff}}, [{0xdd, 0x4e, "927dc89fcf17c17467510130e4321b142e33ac50aa36e57ed04fb20fa5f254404d88f62b49e1625bb034db5a1013bf8c7b88bab645b78ecca0c18d61aae8aab9aa80765ed59481cc0de220a1666f"}, {0xdd, 0xd5, "ebe7018b9a10c978e7f48ef27897985bc43c19c87f4704566dcbb323385666a143f7eb0d6f65e9bd2ddd745ae2df5c4a49024d586425cea86b4ce8c9a1d6f6e7a58f35987ec8063f1d72fb0bc54b5be3f42d250684b1cace515472984eef898ffe679560dae43dd603be3d9ceac2d79d4cc05c661245c32c7af72edbf39228c7ad3a40e4e334abfbf3a8458d0c51651dc1ecaac72096fac87bea7c8caa4772d2247433396d4313d71214e9b6d55b9a1ffa698bfbe6ea449ec77962dccfb3f9e47363a1f4511305a76372d3408566f97fe30ad2379e"}, {0xdd, 0x9f, "eaf8bb927669c4791765f990fbaed7dafc61cdcc7a529f518ad69b3cc132934338ae51313ed171b7716462e538ad9b245fad551455d1c39aa42569e393e8697f140675e039e88b4b866954e2afe294647ef07a6ef4435d3bb85576399bdcadd8bc6fd1af1bfc5d5788e46dc094aaf80f52f8fe93930a9ff62d495a3a4c9464efab33b232a3595806a1c829e705a544218f3c4c82d798fcbb0289ec72ba58ab"}, {0xdd, 0xda, "1ea92ea217a5ae31d05440d7c96cdd97c234a82d26a82f5596f59bcec86a08ad990bbfd77fa5e8ae24f85e45bdbbea6c1b6f924fd3503ca69104ae377d7c1e4958257dd40864bcb0c2cb9343a6ca9e4c55e0b4e0baf9a62c1a4703c7d3d8eac266c1e6b9bc57f55ba37f7204571fdedfd3dda3d98c0b43e6890da940d0b19119ce4005b20870a7f4df8a65f20024310408f09f8464ef7f11337aa6ac15ed269091882f6a00f746f4d09fc812b8b83124ac673479361342b1b335440a92c93fd9018d2d81bee6f56e9a2ec8677c6e661d1ab959d5a7ddcee6ba01"}, {0xdd, 0x67, "da2ff45e6eb5fdf58bde2ed5f54b160c4ce43a252bca3bb41d43ba91a92e0afbb1ec426085d83e3940b2ed965cd7a316d8d5743b00888aec61a7fc89357a0f8034b8c561640b9e15cc3865ee15bea10de6dd04b95e571bbb74d20eb4a9a928140e0f5d05695e1c"}, {0xdd, 0xa6, "d2066ce8ec0e813b5ce542e7547154251916d411566f21c1cd274873dda76834e711fe7caec2c7812f5073124bd67e44a022c4166cccd2095b6c7e2416acb180771ff651bd18e3c67acfa49ca0d103da33f0c675aa90c89d93e0d8a39968d7532006848dac53785ffad017ee29e9e301192c6fb3d1b5a3b0edb622d1f9f34d783b42aee31ce58e2a0da57cdfcdd349bc91ab5b605baab51db74f588bcb8c194130cbf2afdd85"}, {0xdd, 0xf1, "08b43f79979ab1481269ddb4962152591a5e1355863a87989d418bc26f7aa267b054c83579f29629263138857cd248a62356fde6e2744615bd1ddf731ed22cb659f56faa95421593a03ba92290b9198f375cb8b0225c3dfcf5ba4eee49a34b5cdfdd025bd7e15ba544c1c493e40e61590614e4fffa1f85f66e57acdbc24db98401d0759986d7becadcaccc4418cb741a3b104a92f1bf2c69988009d327b73f25cafecef766e957117bce2ecf3a372c1f9f4c78a4058eb39cff83091b752f14f27395b85e930f046d68094c61843d3ac6bbb6d0aa81df3fa5989e730af1938284ca59fc5e0436340148ebefb4ce76a7f94e"}]}}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x2a9, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_b, @device_a, @from_mac, {0x6, 0x9}}, @ver_80211n={0x0, 0x1f, 0x1, 0x2, 0x0, 0x2, 0x1}}, 0x191, @random=0x4, 0x8520, @void, @val={0x1, 0x2, [{0x30, 0x1}, {0x5}]}, @val={0x3, 0x1, 0x64}, @val={0x4, 0x6, {0x7, 0x0, 0x2, 0x20}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x0, 0x4, 0xff}}, @void, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x3, 0x0, {0x9, 0x3f, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x1, 0x2}}, @void, @void, @void, [{0xdd, 0x67, "0d2d30fa381ef23c2ba67730fc60082372f8baf19bac30391db5fb219248cb97e1032fe9b1fe30adb6bcf81fd4aba9d1d8ff0d8cb84a436b11993fbaec48b9bd05e126f3c6dc03afd5d3cf4064888affe6bb835466a0e8d7c1ce0e9ece581ea754fdb41032e633"}, {0xdd, 0xdd, "9700aaed952f32b3f5233ba1e1adb461a6f357758146a6b7d82c0b5c85ff3d326c0f57b704cd7b51dce789bddf934585078b31424d6343c0c39a6130f3c12c93f3239284f28f24c4ff2042f79f4ab1cf992646879b097d2216221eec9cc6f6bafe0cb180f8378592d2c33829d0da9d20a89a8460f366552e17e3738232f71d20b8edd1e5d792679629222669e33fc4b490c4168e518e9fb4adb26bac310e3f10e22fb5a91b55cc7b953a4699a33076f1612e01a7e2e76218915864a59ec4bba180551ef04d02cce34c1ad866cca755b00aa44ebde8240f741b1edb1ac9"}, {0xdd, 0x98, "412e97dc03c5e87a8c98928aa8af56efe1075ea4f9698d68a35ecffd0db11dc08f5d7618c1e7948ecb955b5072e218e59275d632090390630be4bdf095c49d16c22420fc3832a1a7ced8aaa3aad3c6c9577b02bced783f66dac839402c5487844009239e10b37a1267e65fabcf2aa7d875ab3fce217c5f16c71b851d635acd4e2928c517e83d258c4dff894afc18da10a30b7b3ce6b67432"}, {0xdd, 0x65, "1254c6a9cb993ac68a67b7343641598c9163690c63afe1087faff64dc5138cdc63b959d3d615176500867d356926bd8ce4ea670b7b4bc9a11570e34be2e679f155c1a99d012b3031a8d0a766c5813f63a58399b2aaa46ec5c700d1b01fdce7c3e1fe6197cd"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x82, 0x7f, [@mesh_chsw={0x76, 0x6, {0x4, 0x2, 0x15, 0x2}}, @channel_switch={0x25, 0x3, {0x0, 0x8}}, @mesh_chsw={0x76, 0x6, {0xb3, 0x81, 0x800, 0x7b}}, @mesh_id={0x72, 0x6}, @measure_req={0x26, 0x55, {0x40, 0x4, 0xff, "80a69509bc038cbbd433c2bb41692218ed2295220e61424664b12e2299cd927011c83ed82098d4fd5330543a02bd67cb18bb7342819e475e8ef5fdb9595b0e4a3a4a4620fbc2800962075119fc2af1a6994c"}}, @supported_rates={0x1, 0x8, [{0x6, 0x1}, {0xc}, {0x30}, {0x1, 0x1}, {0x1b, 0x1}, {0x36, 0x1}, {0x5}, {0x6}]}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x4}, 0x4000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:09 executing program 0: ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={r0, 0x12}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x240240) 06:46:09 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="3fa1bbb7ce8f2442783fee7986ba7c09c5fd742ecc51f5308424f31ae669f919616aeaba4ae383abd42a5a1b227780824324f8a2d9a3a64e235907e7e3fcee5ce758e18b22e8fa0c0934b95ea071669dd9b045236c8bbd6913a0675fa2f67f1797c052a6252d3a47e768eff902eeeed9826dde7bc038540aade971d886e1ea0839e931beacddbed1f037f57ceb3bfe8a3f7b134606a101e1d2ca23608b88eb42aaa849a1d08587576d3a581b60084427e5cbe26f983d20f67279bd98bc3ec217fa6fbd35143f8b5b7be5b5c41aa573dc44d8f7e3e9451432ac54cf8482b62f91d6287ab6acbca26e16f3b5ebc09da7aa12434563b69dbc547d21bf08a1", 0xfd}, 0x68) 06:46:10 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x4bff], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000080)=[0x4, 0x6, 0x4, 0x8, 0xa583, 0xffffffff], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x80000000, 0x2, 0x800, 0x6, 0xffffffc1], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x5, 0x0, 0xcccccccc}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x40}) 06:46:10 executing program 1: ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x7) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x1ff, 0x9, 0x7, 0x5, 0x1, 0x1, 0x7, 0x1, 0x3, 0xe97f, 0xff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x200000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64ab0448af8516a8}, 0x11) 06:46:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3480000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044004) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff8000/0x2000)=nil) 06:46:10 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000001380)=0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) 06:46:10 executing program 2: mmap$usbmon(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x8, 0x10010, 0xffffffffffffffff, 0x9) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xc4, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x84, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xd6a}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xe2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6af}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x4}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xc}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x80) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00', 0xffffffffffffffff) 06:46:10 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) msync(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1) 06:46:10 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)) 06:46:10 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5, 0x30, r0, 0x82000000) 06:46:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104101}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x64, 0x65}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x400}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x200}]}, 0x3c}}, 0x20000000) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000007, 0x8010, r1, 0x82000000) socket$inet6_tcp(0xa, 0x1, 0x0) 06:46:10 executing program 1: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x2000400c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00', r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000080)=0x6) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x12, r1, 0xcf917000) 06:46:10 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x298, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb6, 0x3, "2b51739e744ad18c608cba3380eb8f06ffff44e4bcbea5b8a35dced50504181585ddea0b22023bd29d3c883abde55dde7af69fa05fd94722c17170ef9530cfc3a42c88efe183afc3f1849488ca9f061d41987e9027595663aa24f9f6c5adb5deb9b7626f6c51ede5ec8699d3ea34202231db5d31915e220daef1963d15d29460cae9e17323b20a9f801a303cb0ad1d5cbc9330a0f50982939db05cbb5813ed5fe251b19bec2924b45351e672e8b00ab76035"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "c95ba3df17f62cdab0a8cf80b4ded3fcc605ee1210c3bc73a01e40785de6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x308}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1eab}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xaad}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}]}, 0x298}}, 0xd02776fc7ac3bf90) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10001, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 06:46:10 executing program 5: socketpair(0xf, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x15f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8880) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24044000) 06:46:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) 06:46:10 executing program 2: mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x6, &(0x7f0000ffa000/0x3000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1831c2, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x2}) 06:46:10 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x1, 0x91d632c8b9e01cb1, r0, 0x82000000) 06:46:10 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x204503, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r2 = socket(0x2c, 0x80000, 0x9) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x2}, 0xa) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x10000}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, 0x3ff, 0x3, 0xbf7023b634ca2b0f}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 06:46:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x10, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x1f, 0x10001, 0x3ff, 0x1, 0xffff, 0x9], 0x6, 0x800}) mmap$snddsp_control(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0xa, 0x2010, r0, 0x83000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0) mincore(&(0x7f0000ffb000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/43) 06:46:10 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x3e, 0x80000001, 0x15}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000001, 0x104011, r0, 0xa43a3000) 06:46:10 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x107400) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 3: mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x200000e, 0x12, 0xffffffffffffffff, 0x82000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) 06:46:10 executing program 0: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) clock_gettime(0x0, &(0x7f00000046c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f00000002c0)=""/214, 0xd6}, {&(0x7f00000003c0)=""/166, 0xa6}, {&(0x7f0000000480)=""/160, 0xa0}, {&(0x7f0000000540)=""/5, 0x5}, {&(0x7f0000000580)=""/16, 0x10}, {&(0x7f00000005c0)=""/111, 0x6f}], 0x8, &(0x7f00000006c0)=""/207, 0xcf}, 0x5}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000a40)=""/26, 0x1a}, {&(0x7f0000000a80)=""/218, 0xda}, {&(0x7f0000000b80)=""/236, 0xec}, {&(0x7f0000000c80)=""/86, 0x56}, {&(0x7f0000000d00)=""/85, 0x55}], 0x7, &(0x7f0000000e00)=""/235, 0xeb}, 0xfffffff8}, {{&(0x7f0000000f00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/24, 0x18}, {&(0x7f0000000fc0)=""/18, 0x12}, {&(0x7f0000001000)=""/26, 0x1a}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4}, 0x5}, {{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000002080)=""/67, 0x43}, {&(0x7f0000002100)=""/164, 0xa4}, {&(0x7f00000021c0)=""/176, 0xb0}, {&(0x7f0000002280)=""/89, 0x59}, {&(0x7f0000002300)=""/160, 0xa0}, {&(0x7f00000023c0)=""/229, 0xe5}, {&(0x7f00000024c0)=""/240, 0xf0}], 0x7, &(0x7f0000002640)=""/66, 0x42}}, {{&(0x7f00000026c0)=@ax25={{0x3, @null}, [@rose, @rose, @null, @rose, @remote, @default]}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002740)=""/170, 0xaa}, {&(0x7f0000002800)=""/115, 0x73}, {&(0x7f0000002880)=""/204, 0xcc}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x4, &(0x7f00000039c0)=""/161, 0xa1}, 0x3f}, {{&(0x7f0000003a80)=@ax25={{}, [@netrom, @null, @netrom, @bcast, @rose, @default]}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003b00)=""/5, 0x5}, {&(0x7f0000003b40)=""/157, 0x9d}, {&(0x7f0000003c00)=""/213, 0xd5}, {&(0x7f0000003d00)=""/123, 0x7b}, {&(0x7f0000003d80)=""/106, 0x6a}, {&(0x7f0000003e00)=""/105, 0x69}, {&(0x7f0000003e80)=""/125, 0x7d}, {&(0x7f0000003f00)=""/105, 0x69}], 0x8, &(0x7f0000004000)=""/198, 0xc6}, 0x7}, {{&(0x7f0000004100)=@hci, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004180)=""/138, 0x8a}, {&(0x7f0000004240)=""/16, 0x10}, {&(0x7f0000004280)=""/59, 0x3b}, {&(0x7f00000042c0)=""/71, 0x47}, {&(0x7f0000004340)=""/99, 0x63}], 0x5, &(0x7f0000004440)=""/151, 0x97}, 0x5}], 0x7, 0x120, &(0x7f0000004700)={r0, r1+10000000}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000004840)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x80, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e63}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 06:46:10 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp_status(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x1, 0x20010, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xc0402, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff4000/0x7000)=nil, 0x7000}) 06:46:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x24000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000100)={&(0x7f0000000080)=[0x2, 0x8, 0x80, 0xffffffff, 0x9, 0x3ff, 0x8, 0x1ff, 0x3ff, 0x8], 0xa, 0x7, 0xffffffc1, 0x3, 0xff, 0x0, 0x7, {0x8, 0xfffb, 0x5, 0x180, 0x5, 0x4, 0x1f, 0x6, 0x40, 0x400, 0x1, 0x7fff, 0x3, 0x5, "a7705949d558f7a9619433497b461a1bad4c926b13c57c0191dce87a58bd4af2"}}) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) 06:46:10 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x8002, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x8400) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, r0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)={0x560, r3, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4}}}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x394, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xec, 0x2, "3fc13ed093dccac1b23d54f489dfb21708368db6772a2e2024397eaaa9039288b9a52aa746ba0c9e69aea7e76a4a7f99f5cb7929c4d0f9ef6e48b8c468e55ee1f0455b7995b3fa07da449b6fb1ca20b87eed84797d090f69e8e8fe1141c94c1b15742c3e617f7a3d3c8d4519020dec3fa78802bb64c87178c5cc3a1fd68669054ef1360da00f5cf60c71795b7bf17e224b6dec310557641eb366820b4d4cc405d2a9bf566b57c233834d6033fd3b2135d835e790228db017fec4cfbef084d4f96ea7f56532dd846bd64e9aae78947d0bfdaf7c790b6d7ccc9e22aad745284d74ab4f0abfc10ca14e"}, @NL80211_BAND_2GHZ={0x7b, 0x0, "6ae25f4dd1924cf8835b89a17bb28588f7b3189369e13fb362de2afafc9817483f117bad87742bc46af1738779b06c1fe553c4d20a16874c9d982d9b895374a403e2f6c1500b3d200bdc40393251a9c36930304cbf99584ba27d06a546df4993649680ac329fe9436566deff760fa59c714d4b50857e9c"}, @NL80211_BAND_6GHZ={0xc, 0x3, "80985b48a2bbc284"}, @NL80211_BAND_5GHZ={0xa7, 0x1, "298fb53b9a2e83bdaf65c5e03a32a013dbfa59f54b40ee08161ef48551c091989009f4ec84710ab63c2d5ee3cd74ee47b0b834aaa7ff81ecc5ab1c658084c93045c90aefb89adb7afcc70f827b00ec8b1542c9522bc8efad9781bbc18eb549e138267365ff97859fadd7eb55e8f8211500bf29ec585ab99eded455ea015ab1f478f130316d3782b8dc22ab18a80276aad3d0306ccb2b1a18db2a17397af49df6592ebc"}, @NL80211_BAND_6GHZ={0x79, 0x3, "f347ea34aba2eabed780b5957335c5366d648810f4700737ec5ff7e958b71e9f28cf9767a433f80759dd0a07c305462668d2b8ecaac557593607ab27c10a7466b4ac0cbd3ec4d8504507367dfd26eb3caa970a284f30df6dbeee6b6ace7d5ad1af158b0992a0637154b1f68e0fc3e0cd0a647600cf"}, @NL80211_BAND_6GHZ={0xe7, 0x3, "6939ad55e88a6f5ef282408c96ef3e7dcd6b7d4b897e3bbe896446cb5a534389a5a37a80b6f75df2717c9cf2303fd346be6a5804b3a0182325f858a30775c4b3e97f1b862d1be812b840e80cfdfd915944b01d2ccbd7b8f64e14f0f30cb28637753200126d9c360f0fca0fc70cf088238cad72be52a9bd69fdedb1c2eaba9093f67e4c220e06d8c8867ec92827c9b77a7c079027cd1a6d9166f923bec69b778e64082fb5133d6a9f8b4dd3f48efaeaee7b9a0dab237f95018856082795de4d9202471f80898c1d2c911ba55ec7f426ab187f302788abd5c388ad3e38e34d06ac6b7092"}, @NL80211_BAND_6GHZ={0xe, 0x3, "e228784c6e35dc570197"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x340}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x10, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x24, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x3}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="3fbc8836c7c2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x9}, {0x8}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCAN_SSIDS={0x84, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1d, 0x0, @random="4a35b0870db7b02d106f05198173a4a76a3e99903f6624de65"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xf, 0x0, @random="e5c732d7b26888408c431e"}, {0x13, 0x0, @random="3c38b241ac7b62d167d83cfd786eef"}]}, @NL80211_ATTR_SCAN_SSIDS={0xa0, 0x2d, 0x0, 0x1, [{0xd, 0x0, @random="967224306bb7ac079b"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x1f, 0x0, @random="3a022fded2d03167d5ad3c974589f6cc9ed56bdfaa3e98247f67ca"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x24, 0x0, @random="af8decfb6636a02f8b7e01ff7500000001504dd00700001b1678faec7e644400"}]}]}, 0x560}, 0x1, 0x0, 0x0, 0x34044040}, 0x80) 06:46:10 executing program 2: ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0x7fff, 0x9], 0x2, 0x9, 0x6, 0x5, 0x81, 0xbe9, 0x2, {0x180000, 0x5f98, 0x9, 0x0, 0x8, 0x0, 0x3ff, 0x2, 0x200, 0x0, 0x8, 0x1000, 0x3f, 0x6, "9a595d01532e76272c9d85fcfc42e30d5375fc40148fa877a5309fc9d1b13f9d"}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x1ff, 0x260}) 06:46:10 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xad, 0x200480) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)="f12f7f3f9ad415a3d430f25e1b109de021228c27aaec559a67904de3b81fed87d29366424e0a7e4d7e4af51aacf52add58a5c32b2336df61bb204994f762e1bb1f6af5526ac65c216a6b33750cee1d826694f7eeacfe5eeb93a2d9c2cad6026050616c6645aaa6de6106ca11568635e3e834ebd1f5df0585cc9bc9d1e04b3ad802407d37132351e334a6521871782dea28c96ac5eca2ea", 0x97, r0}, 0x68) 06:46:10 executing program 1: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x204080) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x50, r0, 0xfd75c000) 06:46:10 executing program 5: sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="80012dbd7000fbdbdf25020000003c00018014800400fe8000000010000040000000000000bb14000400fc0200000000000000000000000000000800060000000000060001000a000000"], 0x50}, 0x1, 0x0, 0x0, 0x4008854}, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', r0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 06:46:10 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x4000010, r1, 0x82000000) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x50082, 0x0) mmap$snddsp(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r2, 0x5000) 06:46:10 executing program 4: mmap$snddsp_status(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x300000c, 0x12, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 3: sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="54c671f908ccadf688181b909704", @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x60000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x100000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x4010, 0xffffffffffffffff, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x2c, 0x0, 0x89}) 06:46:10 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2000002, 0x40010, r0, 0x82000000) 06:46:10 executing program 5: ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xf) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0xa200, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x100, 0x3, &(0x7f0000000040)=[0x1f, 0x1, 0x2], &(0x7f0000000080)=[0x4], &(0x7f00000000c0), &(0x7f0000000100)=[0x5, 0xffff, 0x29, 0x210, 0x0, 0x7], 0x0, 0xffffffff}) socketpair(0x10, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf25ff7fffff08000300", @ANYRES32=0x0, @ANYBLOB="06004800460000001400550028777029ba1e9342fcfc4395f039d2af"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x850) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:10 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x181000, 0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0xe, 0x91d632c8b9e224b1, r0, 0x82000000) socket$nl_generic(0x10, 0x3, 0x10) 06:46:11 executing program 3: mmap$snddsp_status(&(0x7f0000ffa000/0x2000)=nil, 0x1000, 0x3000008, 0x1010, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x30000, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 06:46:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000140)={0x3, 0x3, 0x7ff, 0x8000, 0x3f, 0x8, 0x1}) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="879d00000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf255c0000000c009900340600001400000008006b00f000000008006b00e001000008006b0068010000"], 0x38}, 0x1, 0x0, 0x0, 0x444}, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4a000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 06:46:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fff, 0x200) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x41e1, 0xf6c5, 0x0, 0x2b9b, 0x5, 0x4}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 4: mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x2010, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003480)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000034c0)={'wlan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000003e00)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[], 0x88c}, 0x1, 0x0, 0x0, 0x4081}, 0x24084011) 06:46:11 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x57, 0x3d41, 0x5, 0x5, 0x5], 0x5, 0x800, 0x0, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x0, 0x99, {0x7fff, 0xb}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x2}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}}, 0x4000044) 06:46:11 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 06:46:11 executing program 3: msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0xfffffffffffffffb, 0x0, 0x2}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f0000000140), 0x800, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffd000/0x3000)=nil}) shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x5, 0x5, 0x0, 0x4]}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fef000/0x11000)=nil, 0x11000}, &(0x7f00000001c0)=0x10) mmap$snddsp_status(&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x200000e, 0x12, 0xffffffffffffffff, 0x82000000) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x9, &(0x7f0000ffd000/0x3000)=nil, 0x4) 06:46:11 executing program 0: mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 06:46:11 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000c00000/0x400000)=nil, 0x400000}, &(0x7f0000000040)=0x10) mmap$snddsp_status(&(0x7f0000400000/0xc00000)=nil, 0x1000, 0x380000d, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x573700, 0x0) mmap$snddsp_status(&(0x7f0000ff2000/0xe000)=nil, 0x1000, 0x8, 0x8010, r0, 0x82000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ff8000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 06:46:11 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xcc1ae419c6751d18, 0x0) 06:46:11 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250a0000000600280002000000080039000700000008002b000400000008003a007dea000008000300", @ANYRES32=0x0, @ANYBLOB="0a000900bbbbbbbbbbbb0010080031002000000005002a009d699a4905002d000000000008003200a20a0000b842d6c496fd316795078742b81cea521c5c8dc50d05c5b87a47aaaa9150e637c77560f562a04ef6d86530e5374a67e79f4f3febcf0489f1274802950ecf6ce36bedf6b049846d4037718eccb1"], 0x68}}, 0x4000) openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) 06:46:11 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x208000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x6, 0x0, 0xe1, 0x6, 0x7fff, 0x8, 0x81, 0x1, 0x7}) 06:46:11 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000000)={0x4, 0x1f, 0x9, 0x8001, 0x80000000, 0x7fffffff, 0x401}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc, 0x810, r0, 0x0) 06:46:11 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x900, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}}, 0x810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x83f91584302a020b, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24040805) 06:46:11 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000400000/0xc00000)=nil, 0xc00000}, &(0x7f0000000040)=0x10) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x82000000) 06:46:11 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4080c1, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000100)={0x5b99, 0xffffffff, 0x0, 0xae, 0x12, 0x8}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x2, 0x5, 0x10}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x40, 0x7, 0x6, 0x4}, {0x8, 0x2, 0x9, 0xbb}, {0x1, 0x79, 0x88, 0x3ff}]}) 06:46:11 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x121000, 0x0) fcntl$getown(r1, 0x9) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000080)={0x8, 0x3, 0x0, 0xf0, 0x6, 0x8}) write$proc_mixer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="535045414b4552202753796e746820436170a4a659dd5eadbc55746368272067303002b13030303030303030303030303030300a564944454f0a"], 0x3a) socket(0x6f, 0x5, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x80000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffa000/0x2000)=nil, 0x20, 0x2, 0xa}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ff9000/0x1000)=nil, 0x5, 0x1, 0x40}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5e5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) 06:46:11 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$usbfs(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x9946) 06:46:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x40000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) socketpair(0x26, 0x3, 0x140000, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r3) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x300000b, 0x40010, r0, 0x82000000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000140)="8ea5008f91a14a5eb042c08769b665f0f5a23aa1a036f41725e8affd782c7d984a2751b271aa409d3eb5d26f6b4028dd57a36f234bb876c9c4ae1f6b35a5550ff9b2a2523eb143b499e9ab1dec9a0c146daccf4ababae8395028ad5ebf196c40778dd0045b986c258d176343a672993f5828d23b20b6", 0x76}) 06:46:11 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) read$proc_mixer(r0, &(0x7f0000000280)=""/11, 0xb) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00', 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40033080}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "9cbb48633efd0c5baae01cec14"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "c8571aa2819027624e21e6dbec"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x6, 0x4, 0x3f, 0x1}, {0x3f, 0x8, 0x1, 0x401}, {0x9, 0x3, 0x3f, 0x9}, {0xfd, 0x81, 0xf7, 0x3}]}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) 06:46:11 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd2b, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r3 = socket(0x1a, 0x80800, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r5, 0xc01c64ad, &(0x7f00000000c0)={0x1000, 0x2000, 0x2, 0x3, 0x5, 0x4, 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 06:46:11 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1f11d2d103"}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x3000006, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd2f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) 06:46:11 executing program 3: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) fcntl$getown(r1, 0x9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0xd3c, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x6, 0x0, 0x32}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x100) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fae830", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250f000000080004000200000008000500020000000c00028006000b000a000000"], 0x30}, 0x1, 0x0, 0x0, 0x40051}, 0x48044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000001c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="21000001", @ANYRESDEC, @ANYBLOB="00022dbd7000fcdbdf250e0000000800060008000000080005008100000040000380060004000943000008007909b2d00000050008000400000014000200776c616e3100000000000000000000000600040002000000050008003f00000073697000060001000a020000679e6cc207cbc40c000700400000003300000008000800000400000800050000000000080005000400000008000005000001800600010002000000060002002b00000008000b007369700008000600160d00"/201], 0xd8}}, 0x4008040) socket$inet6_tcp(0xa, 0x1, 0x0) 06:46:11 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0], 0x40000026}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff8000/0x4000)=nil, 0x1000, 0x2000000, 0x2010, r2, 0x82000000) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000080)={0x0, 0xc2}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r3, &(0x7f0000000100)=""/119}) 06:46:11 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x220000, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x80) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x82000000) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x40) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x6000002, 0x100010, r0, 0x82000000) 06:46:11 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/136) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000100)=0x40) 06:46:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x200800c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xd9fc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008841}, 0x800) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x8014080) 06:46:11 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x11, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', r0) getsockname(r0, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000100)=0x80) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x214, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x4}, 0x20040011) 06:46:11 executing program 2: mmap$snddsp_status(&(0x7f0000ff8000/0x4000)=nil, 0x1000, 0x200000a, 0x11, 0xffffffffffffffff, 0x82000000) 06:46:11 executing program 4: ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x2000006, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000000)={0xc4e, 0x81, 0x7fffffff, 0x3ff, 0x9, 0x40, 0x81}) 06:46:12 executing program 2: shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, 0xffffffffffffffff, 0xb000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1f) 06:46:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/159, 0x9f}], 0x1, &(0x7f0000000180)=""/178, 0xb2}, 0x3c5d}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/138, 0x8a}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/183, 0xb7}, {&(0x7f00000015c0)=""/41, 0x29}], 0x6, &(0x7f0000001680)=""/77, 0x4d}, 0x5}, {{&(0x7f0000001700)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001780)=""/66, 0x42}, {&(0x7f0000001800)=""/198, 0xc6}], 0x2, &(0x7f0000001940)=""/224, 0xe0}, 0x6}, {{&(0x7f0000001a40)=@xdp, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001ac0)=""/16, 0x10}, {&(0x7f0000001b00)=""/133, 0x85}, {&(0x7f0000001bc0)=""/227, 0xe3}, {&(0x7f0000001cc0)=""/221, 0xdd}, {&(0x7f0000001dc0)=""/188, 0xbc}, {&(0x7f0000001e80)=""/118, 0x76}, {&(0x7f0000001f00)=""/106, 0x6a}], 0x7, &(0x7f0000002000)=""/160, 0xa0}, 0x94b3}, {{&(0x7f00000020c0), 0x80, &(0x7f0000002200)=[{&(0x7f0000002140)=""/166, 0xa6}], 0x1}, 0x6}, {{&(0x7f0000002240)=@l2, 0x80, &(0x7f0000002600)=[{&(0x7f00000022c0)=""/175, 0xaf}, {&(0x7f0000002380)=""/242, 0xf2}, {&(0x7f0000002480)=""/65, 0x41}, {&(0x7f0000002500)=""/74, 0x4a}, {&(0x7f0000002580)=""/92, 0x5c}], 0x5}, 0x3}, {{&(0x7f0000002680)=@qipcrtr, 0x80, &(0x7f0000002700), 0x0, &(0x7f0000002740)=""/142, 0x8e}, 0x8}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002800)=""/254, 0xfe}, {&(0x7f0000002900)=""/19, 0x13}, {&(0x7f0000002940)=""/95, 0x5f}, {&(0x7f00000029c0)=""/111, 0x6f}, {&(0x7f0000002a40)=""/164, 0xa4}], 0x5}, 0x1}, {{&(0x7f0000002b80)=@xdp, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002c00)=""/101, 0x65}], 0x1, &(0x7f0000002cc0)=""/81, 0x51}, 0x40}], 0x9, 0x40010040, &(0x7f0000002f80)) 06:46:12 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x300000e, 0x91d632c8b9e074b0, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 4: r0 = getpid() move_pages(r0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040)=[0x9, 0xfffffff9, 0x7ff, 0x6c2, 0x9c, 0x5ed1, 0x7ff, 0x6, 0x5], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)) 06:46:12 executing program 2: ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x7811, 0x7dd, 0x7fff, 0x9, 0x7, 0x7, 0xa605, 0x9], &(0x7f0000000040)=[0x0], 0x9, 0x9, 0x77777777}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000000c0)={0x8001, 0x7, 0x0, 0x8893, 0xfffffffffffffffe}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100)="20f656f1e73c4314caad9eeb98019840f3e76b05fb46fd99cfc9f02393e34e722b45f15d44bba7d75e846de2f2a09a80517f13c0c0ad1070d41d0fe748f717e4eb0da250b03c3686c84a864785d45dace63011dcf4a1c02f1983180ed8dd447ff954cd91827273c78d06345150adfb16be12c192801b0a5d0188107853d4d4cd71e0731ed4040c7a61c468e65ae7655e2cde39cae7aecba893e9cd7c54", 0x9d, r2}, 0x68) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1000007, 0x30, r0, 0x83000000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0xa0000, 0x0) 06:46:12 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x48200, 0x0) 06:46:12 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2, 0xffff6948, 0x75cd54e9], 0x3, 0x0, 0x0, 0xffffffffffffffff}) mmap$snddsp_control(&(0x7f0000ff5000/0x2000)=nil, 0x1000, 0x2000005, 0x10, r0, 0x83000000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x6000) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff6000/0x2000)=nil) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x3000) mremap(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000007b40)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000007b80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000007d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000007cc0)={&(0x7f0000007bc0)={0xcc, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ff5000/0x3000)=nil, 0x3000}) 06:46:12 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x80000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x0, 0x110, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4850) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="2e0728bd7000ffdbdf251f0000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="0a00113f777067f3a1003a5fa350bb49419f5ffc4308616e33000000080002006f52a8ec88fc61d1", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e30000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c004) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xe0d) 06:46:12 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x2000)=nil, 0x1000, 0x9, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap$snddsp_status(&(0x7f0000003000/0x4000)=nil, 0x1000, 0x2000003, 0x10, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x62d744a4d824cd11, 0x11, 0xffffffffffffffff, 0x82000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xdd1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040800}, 0x800) 06:46:12 executing program 0: socketpair(0x22, 0x3, 0x0, 0x0) socketpair(0x25, 0x800, 0xfffff000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x2a, 0x6, 0x4, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, 0x0, 0x420, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4010}, 0x20008040) 06:46:12 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x44754000) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5000001, 0x10, r1, 0x82000000) 06:46:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:46:12 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x100000b, 0x1010, r1, 0x82000000) socketpair(0xa, 0x1, 0xffffffe0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="56e1b5fb74e3f89da882b0ec0731871ea4451cf7377e381f5bb48ddd7c35d40359c9c3d5b00062476fd8fec3f0b76a8acd", 0x31, r1}, 0x68) fcntl$getown(r2, 0x9) 06:46:12 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x1010, r0, 0x8000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x2000)=nil, 0x6000) 06:46:12 executing program 4: mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x13, 0xffffffffffffffff, 0x83000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = fork() r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) getpgid(r0) 06:46:12 executing program 3: mmap$snddsp_status(&(0x7f0000ff8000/0x2000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200) 06:46:12 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) mmap$snddsp_status(&(0x7f0000ff8000/0x3000)=nil, 0x1000, 0x200000e, 0x10010, r0, 0x82000000) 06:46:12 executing program 5: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000025bd7000fedbdf257f00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00f5005bc5e5c889570000160034001388f2fc8f46c075e549401e12c43ffbea4c00000600000001010101010100000a00f500080211000001000014005500d6ab3f92d7dc19408aa86511dbb3f1a173fe0fd72043364603afdd0a"], 0x78}, 0x1, 0x0, 0x0, 0x4004080}, 0xc0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x300000b, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000000)=0x9) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)={0x4a8, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@cf={0x4, 0x6, {0x1, 0x1, 0x8}}, @ibss={0x6, 0x2, 0x3}, @channel_switch={0x25, 0x3, {0x1, 0x7e, 0xc0}}]}, @NL80211_ATTR_BEACON_TAIL={0x11e, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @peer_mgmt={0x75, 0x4, {0x0, 0x6, @void, @void, @void}}, @peer_mgmt={0x75, 0x4, {0x1, 0x9, @void, @void, @void}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x8, 0x99, 0x8}}, @fast_bss_trans={0x37, 0xfd, {0xb2, 0xa, "4406fb65539071728141ad1e1e89414c", "d250e19931ff8bc84e01b28fd8d9ac5473ed29e61d95ea7c1311d9440148c44c", "0c0da258b62397c969b94765bac08f3a230ae053fd8240e4acd3ae922d815669", [{0x4, 0x18, "926e9c353520ed41a43cb8768cc8a4159d6db0b9f266a722"}, {0x1, 0x23, "ed240e2e27a3c92d51381950b3908d9ee5fe37b0ff25388975811564f6e60ac759128b"}, {0x2}, {0x4}, {0x5, 0x1a, "51d16a2ab7748a70a8fc66bd0c02c9ef309982da33eba4fcc3a4"}, {0x3, 0xf, "18077fb3d3e4d00f2a7e69caba32a6"}, {0x4, 0x7, "ca9dd5bb091f4a"}, {0x1, 0x20, "30940e3aa21658228510b0657423cc887804f141ba7143f1a1267f6782cfcc97"}, {0x2, 0x9, "defa9d763a1f0bda16"}, {0x4, 0x3, "b879ed"}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0x80, 0x3}}]}, @NL80211_ATTR_BEACON_HEAD={0x22d, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @random="2d24173acd02", {0x2, 0x3}}, @ver_80211n={0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, @random=0xfff, 0x4, @val={0x0, 0x1, @random="04"}, @val={0x1, 0x1, [{0x6}]}, @val={0x3, 0x1, 0x33}, @val={0x4, 0x6, {0x97, 0x7, 0xf001, 0x9}}, @val={0x6, 0x2, 0x9242}, @void, @val={0x25, 0x3, {0x0, 0xd, 0x1}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x2, 0x8, 0x80}}, @void, [{0xdd, 0xef, "6c06795e9376825e2cb155f5624666106f22fa04ba8186c063cb42265dd78eca65f38876a919e185da3ad2966c9aca2f7ee00f4326e0769acee782458f40b09f44722343eca66b355c685c9f321063808adad1750e43d12187ef280bc46047b4dd427d2674e4278c266ac56189412b3e5eb7a961d9813be46e51f5d9f1ae66823acaa1018f84e94ec540eaf6ff1eaee05052d9577ec0c103ddd16aaf39a610df3f1dd5dfcc159e2aa474af17cd3cc50364dee4ad568af1464b7e99797f7427386d4412366a8e2b1af32e9624edb74e4dd96a307e8ba32ff3065f84e776ef5e362a9763c41477f62f78ebee72acd696"}, {0xdd, 0xeb, "a0b4d52461c611fcea6372082669d0038367d522c36fa846c0cdcf0075e0b2f57e7e4fd431f4a11e527b74c9c835dd066f3f48c491250647302020fa4dc8e971cd9fc8dae2f59063b521cf2414b8b0b356bd1b34569339644037fb2c33e3c8c06c69c7bf0acd899f3bc92d962a128d65af3567e52a8951d409fd51c97abb03ffdf8965a1083ec7f46ca7e453044bbe67b97ef72052a027cf3463dbfec5564f156db7e072f0e48330f774c7120c547ba673db84628f3a9f20f1b65a80d4986affea961a9f453f9115520e63d1777bbea0a937c1962f14ebed56f72c712253f36f9ce71f931be18f681950dd"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x68, 0x7f, [@ht={0x2d, 0x1a, {0x8, 0x0, 0x0, 0x0, {0x7fffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x1ff, 0x1}}, @preq={0x82, 0x46, @not_ext={{0x0, 0x1}, 0x3, 0x7d, 0xad8, @device_b, 0x100, "", 0x0, 0x1, 0x4, [{{0x1}, @device_a, 0x6}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @broadcast, 0x81}, {{}, @device_b, 0x8}]}}]}, @NL80211_ATTR_IE={0xba, 0x2a, [@ibss={0x6, 0x2, 0xb64}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="5f7a412b6ca95777dc4f8f10d5326702"}}, @measure_req={0x26, 0x97, {0x0, 0x9, 0x4, "712b6c08e2e0217a5f186e8cc74e2ba776dbd5171d90d395d21e62db503b51db46f20f1fbd5f9bfe1aabafd1d6721fa2d0ab63c5f891a684798a2cb47c24a38c72e97024872decb14e246cc532028b9ffb7a81e12fcae87ebd374b69d2f379939c742b853342cd9f699c3fd37850d23eb4465b5836b2e6b1e6ee2dc2b7b48c8fec4e60a0e32ec18fc351dbae9ac49467c06dd511"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x40800}, 0x20008040) 06:46:12 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001180)={0x10000, 0x6, 0x6, 0x58, &(0x7f0000000040)=""/88, 0x1000, &(0x7f00000000c0)=""/4096, 0x98, &(0x7f00000010c0)=""/152}) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 06:46:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x30040, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x200000e, 0x20010, r1, 0x82000000) 06:46:12 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 3: mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x2000006, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) msync(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x1) 06:46:12 executing program 5: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000)='NLBL_CALIPSO\x00', 0xffffffffffffffff) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x2, 0x5, 0x9, 0xffff, 0x49f, 0x2, 0x3f, 0xf9], 0x8, 0x800}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00', r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) 06:46:12 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x0, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff, 0x2) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000040)={0x8, 0x5, 0xd, 0xffff0000, 0x3}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 1: write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x8b}, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000040)={0x8, 0x8, 0x1, 0x1, 0x1f, 0x3f, 0x49b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xfe7, 0x8, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r0}) 06:46:12 executing program 2: mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x82000000) 06:46:12 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000000)="91add2c06d1c0a184a9a36e9d8ab5a39d989356f394636388a2e104a11a255b8b38748dda77249c44efcb0aa7b3dc2a070bdfd3ca86728cd47b7a98d0150c7c30c9841d0525b65be51c90b1df1a85c1abbc26f4abd6704a2b112170df17e59070fae90a9dadd6c3880c0983b193055f90da6fd", 0x73}, 0x68) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x104842, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x83000000) 06:46:13 executing program 3: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1b9841, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1f}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) 06:46:13 executing program 4: r0 = shmget(0x2, 0x3000, 0x1200, &(0x7f0000ffb000/0x3000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r1 = userfaultfd(0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00'}) r2 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, r2) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x164, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x80}, @NL80211_ATTR_IE={0x141, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x5, 0x7}}, @chsw_timing={0x68, 0x4, {0x4, 0x5ae}}, @tim={0x5, 0xbb, {0xfb, 0xed, 0x81, "983fa53e4c1747e555f3dca6310928af89fe9890a666091b6b3df8dca6e8a395b0c74fdcc44c2f621d597b43e2c7f25510b104c284ed65760af2dd9772f772d35fbfcf8e05e48761ff606bb673c16f6ced609bece47c2945fc2dfff6c639eb71c32ab0615ecdcabf7add4d9dee811cf81bb7e7379243ca1984f7e27b995890a38816e73c05ec3caa76a75c1e863b3f8d505dbf77399e0b62a56b453e0376b9734e32ba4a335857528c49a8b034f8efe4fc7add3c30f0b083"}}, @perr={0x84, 0x56, {0x7f, 0x6, [@not_ext={{}, @broadcast, 0xfffffff9, "", 0x3d}, @not_ext={{}, @device_b, 0x7, "", 0x36}, @not_ext={{}, @broadcast, 0x80000001, "", 0x2d}, @ext={{}, @device_a, 0x9, @device_b, 0xbb88}, @not_ext={{}, @device_b, 0x1, "", 0x14}, @not_ext={{}, @broadcast, 0x10000, "", 0x5}]}}, @ssid={0x0, 0x1a, @random="182371b43688d75ac9da59acbb9f1ecd184010a203040c9ca20c"}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ff9000/0x2000)=nil, 0x2000}, 0x1}) 06:46:13 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ff9000/0x3000)=nil) 06:46:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd70004edbdf252e00000008000200", @ANYRES32=r5, @ANYRES32], 0x58}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf7}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) move_pages(0x0, 0x7, &(0x7f0000000000)=[&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil], 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ff2000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 06:46:13 executing program 5: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001fc0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002200)={&(0x7f0000002000)={0x1e8, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x1c, 0x18, {0xffffffe0, @bearer=@l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x24000000) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff7, 0x60}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40884) mincore(&(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/28) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x4002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)="63513377cc8a9f40c423a7c07a7ade7017f859d81f95f0f46439e836bc4ba72e3f7578e77a31162cc03d4bf9260d90223d83266ecff15796f739c6ac1252cc38da190a3232b7bd900d377ab75d33f76163544d7a77a8098304ef0577c32ba13451215bb95118e62ba4283c3a5ef03e7785adb283c0a069571e5409528dd2db7a0515a36522d3a189dca02d0b8135e4a4fe2919080a1f7845b55805e123ca1f1317be223eef36b648f28b16b2b56ee130dcae30", 0xfffffffffffffc27, r6}, 0x68) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0xffffffffffffffff) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x38840, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) 06:46:13 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000180)={0x0, 0x7fff, 0x1, 0x0, 0xfffffffb, 0xf3f, 0x0, 0x9, 0x6}) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000140)={0xf40d851, 0x7, 0x3ff, 0x1, 0xc, 0xc68}) 06:46:13 executing program 3: mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2000008, 0x11, 0xffffffffffffffff, 0x82000000) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 06:46:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88838444}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:13 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000005000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000006000/0x1000)=nil, &(0x7f0000000000)="e478296a2b00d2135532c2378a32c68952e244f50ae0a2f9f349062eee739c019466470a64f6a65cf045b085af35a601e1cb1fcafebfcf7fa4d9adda227a59e080c2694bf80fe0e4d6f992ff1819e0e6d903f543f80aebdcefb13659f62332ecbc2f7cd0e269980d2970a7556a6545b2a6acaf5344991b3f7d10f16a2c2d966ef951a6c91cfb184d8afd818a2e0d0a667f616aa5b826d86e0250f55ab3862a158b8e5727d9dbe5e6dd4e3fb74ebb2441466cfe9823d4a66f5cb4c27c6a657034d50f51e02732245a803ed5a76e31535a8025dd0f4a0ec5813929c678fdbfb377ddcda0edb57c60653ed5a6d7f678", 0xee}, 0x68) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:13 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) 06:46:13 executing program 3: mmap$snddsp_status(&(0x7f0000ff2000/0xd000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:13 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) [ 1032.880952] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 06:46:13 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/132) 06:46:13 executing program 0: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x6000003, 0x11, 0xffffffffffffffff, 0x82000000) [ 1032.930034] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 06:46:13 executing program 4: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x110, 0xffffffffffffffff, 0x82000000) mmap$snddsp(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0xc000) r0 = getpgid(0x0) move_pages(r0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=[0x6, 0xfb2b, 0xea, 0x400007, 0x7ff, 0x0, 0x62a4], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[0x51b, 0x1f, 0x400, 0x4, 0x8, 0x98, 0x7fff, 0x0]}) getpid() r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3d3, 0x8000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000100)="786262ed18145e9f3cf8136a5e9ff7d5d57070c20478a3396042747582ad4a0b38f506b5af21de1482ff3255a3bc88deffa4dcb72ee4c66c8d0797aafb3d13f134a4ed15ee1997edbf36b73f6798932a7199cc58", 0x54}) mmap$snddsp_status(&(0x7f0000ff0000/0xe000)=nil, 0x1000, 0x2000006, 0x10010, 0xffffffffffffffff, 0x82000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) mmap$usbfs(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x4, 0x10, r3, 0x8) 06:46:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0)='802.15.4 MAC\x00', r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x24}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000829bd7000ffdbdf252800000006000600ffff00000a0001007770616e330000000dfee4a1cb198d658c9290ab9ac7cfe39468c631cc203c071db170591d787e88c2557cae97b63019c35ccd19dad5862e7a18907d056aa82668835530e28f840a414ad040ab2bbccdd958aa7ca8b469dbf8bdba3b125dc92c13ec3c8b3029c131d4d4a088a72cfc80ed4e10d3154a7f500df50ad1b7b3302963b16bdddd30949c9fdd54345a4a185525bfd8bb37c30b769d244fac61ab08a5523609ce20d2879d3aa8f5d01f33843cc2f417b8bddb3e73d8dd795c70e7"], 0x28}, 0x1, 0x0, 0x0, 0x20040801}, 0x800) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) userfaultfd(0x80000) 06:46:13 executing program 1: shmget(0x3, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 06:46:13 executing program 3: mmap$snddsp_status(&(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x200000e, 0x110, 0xffffffffffffffff, 0x82000000) mmap$snddsp_control(&(0x7f0000ff4000/0xc000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x83000000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000040)="c44df32350bc3c53b7bbc235e69d11fd35f43186a5579055e89b2bf5ec2fb1686b07df150fb00af37d17d5094a179e6263c369116462647c07195598cc2b9760345ad104ba98107ce8b20e901fb3e6f49cd34f63e672a0921260e2d4cc69d583845fccfcdea6827ca7fe3f5d5917431f3412e1082a16fe5d2de000244f045b963e3d6b5e226f25f3be465b1ed709abf1f38845d99312ba8957d9458043dd1dc696513740a86163369cf89643dabead3f7cf43fda29b43821a848e22a521084af744e72df8000"/208, 0xa2}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x44882, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000200)={r2, 0x20}) fcntl$getown(r0, 0x9) 06:46:13 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80102, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) fcntl$getown(r3, 0x9) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000180)={0x2, 0x2, 0x7fffffff, 0x0, 0xb5ca, 0x38d, 0x4, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xb3ab, 0x4, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)={r4}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, r0, 0x82000000) 06:46:13 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x1, 0x91d632c8b9e224b1, r0, 0x82000000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x2000)=nil, 0x2000) 06:46:13 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) userfaultfd(0xc00) [ 1033.236692] ================================================================== [ 1033.244349] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210 [ 1033.251396] Read of size 8 at addr ffff8880b333a900 by task syz-executor.0/600 [ 1033.258895] [ 1033.260541] CPU: 1 PID: 600 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 1033.268255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.277640] Call Trace: [ 1033.280261] dump_stack+0x1b2/0x281 [ 1033.283927] print_address_description.cold+0x54/0x1d3 [ 1033.289235] kasan_report_error.cold+0x8a/0x191 [ 1033.293975] ? vgem_gem_dumb_create+0x200/0x210 [ 1033.298683] __asan_report_load8_noabort+0x68/0x70 [ 1033.303641] ? vgem_gem_dumb_create+0x200/0x210 [ 1033.308348] vgem_gem_dumb_create+0x200/0x210 [ 1033.312888] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1033.318088] ? __drm_printfn_debug+0x70/0x70 [ 1033.322521] drm_ioctl_kernel+0x14c/0x200 [ 1033.326696] drm_ioctl+0x419/0x870 [ 1033.330376] ? __drm_printfn_debug+0x70/0x70 06:46:13 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x692f, 0x46080) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x800, 0x1, 0x9e, 0x8865, 0x5, 0x1}) mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x30, r1, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x1ff, 0x1, 0x8, 0x3, 0x1f, 0x8], 0x8, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil}) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0xe000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000140)={0x1ff, 0x1000, 0x0, 0x4, 0x400}) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) [ 1033.334804] ? drm_getstats+0x20/0x20 [ 1033.338635] ? futex_exit_release+0x220/0x220 [ 1033.343158] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1033.348300] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1033.353342] ? drm_getstats+0x20/0x20 [ 1033.357212] do_vfs_ioctl+0x75a/0xff0 [ 1033.361093] ? ioctl_preallocate+0x1a0/0x1a0 [ 1033.365570] ? lock_downgrade+0x740/0x740 [ 1033.369793] ? __fget+0x225/0x360 [ 1033.373256] ? do_vfs_ioctl+0xff0/0xff0 [ 1033.377259] ? security_file_ioctl+0x83/0xb0 [ 1033.381695] SyS_ioctl+0x7f/0xb0 [ 1033.385065] ? do_vfs_ioctl+0xff0/0xff0 [ 1033.389072] do_syscall_64+0x1d5/0x640 [ 1033.393019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1033.398240] RIP: 0033:0x466459 [ 1033.401437] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.409154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1033.416452] RDX: 00000000200000c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1033.423773] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1033.431113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1033.438556] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1033.445899] [ 1033.447551] Allocated by task 600: [ 1033.451206] kasan_kmalloc+0xeb/0x160 [ 1033.455077] kmem_cache_alloc_trace+0x131/0x3d0 [ 1033.459807] __vgem_gem_create+0x44/0xe0 [ 1033.463920] vgem_gem_dumb_create+0xc5/0x210 [ 1033.468346] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1033.473406] drm_ioctl_kernel+0x14c/0x200 [ 1033.477589] drm_ioctl+0x419/0x870 [ 1033.481152] do_vfs_ioctl+0x75a/0xff0 [ 1033.485052] SyS_ioctl+0x7f/0xb0 [ 1033.488453] do_syscall_64+0x1d5/0x640 [ 1033.492378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1033.497929] [ 1033.499603] Freed by task 600: [ 1033.502875] kasan_slab_free+0xc3/0x1a0 [ 1033.506899] kfree+0xc9/0x250 [ 1033.510038] drm_gem_object_free+0x8f/0x150 [ 1033.514410] drm_gem_object_put_unlocked+0xc3/0x160 [ 1033.519453] vgem_gem_dumb_create+0xf2/0x210 [ 1033.523917] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1033.528957] drm_ioctl_kernel+0x14c/0x200 [ 1033.533131] drm_ioctl+0x419/0x870 [ 1033.536705] do_vfs_ioctl+0x75a/0xff0 [ 1033.540556] SyS_ioctl+0x7f/0xb0 [ 1033.543949] do_syscall_64+0x1d5/0x640 [ 1033.548019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1033.553210] [ 1033.554872] The buggy address belongs to the object at ffff8880b333a800 [ 1033.554872] which belongs to the cache kmalloc-512 of size 512 [ 1033.567583] The buggy address is located 256 bytes inside of [ 1033.567583] 512-byte region [ffff8880b333a800, ffff8880b333aa00) [ 1033.579503] The buggy address belongs to the page: [ 1033.584464] page:ffffea0002ccce80 count:1 mapcount:0 mapping:ffff8880b333a080 index:0x0 [ 1033.592685] flags: 0xfff00000000100(slab) [ 1033.596841] raw: 00fff00000000100 ffff8880b333a080 0000000000000000 0000000100000006 [ 1033.604783] raw: ffffea0002940ce0 ffffea0001e35660 ffff88813fe80940 0000000000000000 [ 1033.612664] page dumped because: kasan: bad access detected [ 1033.618457] [ 1033.620101] Memory state around the buggy address: [ 1033.625089] ffff8880b333a800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 06:46:14 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000f, 0x91d632c8b9e224b1, r0, 0x82000000) 06:46:14 executing program 5: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000040)={0x7fff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x24a00, 0x0) 06:46:14 executing program 2: mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000140)={0x1, 0xfe}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f00000000c0)={0x9, 0x5, &(0x7f0000000000)=[0x56f2, 0x8, 0x27, 0xf2a, 0xfff], &(0x7f0000000040)=[0x74d, 0x1f, 0x400, 0xf326], &(0x7f0000000080)=[0x800, 0xf4eb, 0x8, 0x8]}) 06:46:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00)='mptcp_pm\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00', 0xffffffffffffffff) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xfffffff8, 0x112e, 0x5, 0xa}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2804}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x5, @media='udp\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48840}, 0x8000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000002f00)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ec0)={&(0x7f0000000280)={0x5c, r1, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40100000, 0x4000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0xc800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x3ff, 0x3f, 0x40}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) [ 1033.632494] ffff8880b333a880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1033.639869] >ffff8880b333a900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1033.647257] ^ [ 1033.650655] ffff8880b333a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1033.658532] ffff8880b333aa00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1033.665916] ================================================================== [ 1033.673302] Disabling lock debugging due to kernel taint 06:46:14 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000000)={0x9, 0x7fff, 0xfffffffc, 0x3}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x41f0aef4d06e7895, r0, 0x82000000) 06:46:14 executing program 5: ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000000)={0x7, 0x401, 0x2, 0x1, 0x2, 0xffff0001, 0x4, 0x1, 0x20}) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:14 executing program 2: mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) 06:46:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, 0x0) mmap$snddsp_status(&(0x7f0000ff9000/0x4000)=nil, 0x1000, 0x200000e, 0x91d632c8b9e224b1, 0xffffffffffffffff, 0x82000000) [ 1033.820257] Kernel panic - not syncing: panic_on_warn set ... [ 1033.820257] [ 1033.827796] CPU: 0 PID: 600 Comm: syz-executor.0 Tainted: G B 4.14.227-syzkaller #0 [ 1033.836733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1033.846097] Call Trace: [ 1033.848704] dump_stack+0x1b2/0x281 [ 1033.852376] panic+0x1f9/0x42d [ 1033.855695] ? add_taint.cold+0x16/0x16 [ 1033.859687] ? ___preempt_schedule+0x16/0x18 [ 1033.864112] kasan_end_report+0x43/0x49 [ 1033.868214] kasan_report_error.cold+0xa7/0x191 [ 1033.872905] ? vgem_gem_dumb_create+0x200/0x210 [ 1033.877688] __asan_report_load8_noabort+0x68/0x70 [ 1033.882765] ? vgem_gem_dumb_create+0x200/0x210 [ 1033.887439] vgem_gem_dumb_create+0x200/0x210 [ 1033.891935] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 1033.896950] ? __drm_printfn_debug+0x70/0x70 [ 1033.901454] drm_ioctl_kernel+0x14c/0x200 [ 1033.905603] drm_ioctl+0x419/0x870 [ 1033.909144] ? __drm_printfn_debug+0x70/0x70 [ 1033.913574] ? drm_getstats+0x20/0x20 [ 1033.917459] ? futex_exit_release+0x220/0x220 [ 1033.922001] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1033.927107] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1033.932129] ? drm_getstats+0x20/0x20 [ 1033.936039] do_vfs_ioctl+0x75a/0xff0 [ 1033.939839] ? ioctl_preallocate+0x1a0/0x1a0 [ 1033.944384] ? lock_downgrade+0x740/0x740 [ 1033.948550] ? __fget+0x225/0x360 [ 1033.952193] ? do_vfs_ioctl+0xff0/0xff0 [ 1033.956295] ? security_file_ioctl+0x83/0xb0 [ 1033.961043] SyS_ioctl+0x7f/0xb0 [ 1033.964551] ? do_vfs_ioctl+0xff0/0xff0 [ 1033.968544] do_syscall_64+0x1d5/0x640 [ 1033.972444] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1033.977645] RIP: 0033:0x466459 [ 1033.980863] RSP: 002b:00007f7db4783188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.988567] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1033.995838] RDX: 00000000200000c0 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 1034.003207] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1034.010479] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1034.017745] R13: 00007ffc909434cf R14: 00007f7db4783300 R15: 0000000000022000 [ 1034.025548] Kernel Offset: disabled [ 1034.029534] Rebooting in 86400 seconds..