rogram 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x0, 0xeee1, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r5}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000100)={0x40}, 0x1) 04:09:54 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:54 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:54 executing program 3: write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fcfbdf250b0000000800320001010000050029000000000005003300000066d90a000900ffffffffffff0000060028000126ed7b75ea466812c694b8f6f4b3"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20004400) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x4000) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x600300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x6, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:54 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:54 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x0, 0x1ff, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x400, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x200, 0xffffff7f, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x86, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xbb3, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r8}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r8, 0x6e, "ce6230", "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"}}, 0x110) 04:09:54 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:54 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x2ca00) 04:09:54 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x2ca00) 04:09:54 executing program 4: syz_open_dev$dri(0x0, 0x0, 0x2ca00) 04:09:55 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) 04:09:55 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) 04:09:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x80000000, 0x40c00) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x8000) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x5, 0x200000) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000005c0)) r9 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000040)={r11}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000080)={r3}) 04:09:55 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) 04:09:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffff954, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:55 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000080)=0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000340)={r6}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x5, 0x8, "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", 0x3, 0xff, 0x0, 0x1f, 0x2, 0x3, 0x3f, 0x1}, r7}}, 0x120) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r9, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r7}}, 0x18) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000100)=""/60, 0x3c}], 0x2, &(0x7f0000000280)=""/25, 0x19}, 0x40010101) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x200000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x7f, 0x5, 0x27b8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x4, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x200001, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000080)=0x926e) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffff954, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x1, 0x3, 0x7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xfffffffffffff800, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000100)={0x7, 0x4, 0x8000, 0x4, '\x00', 0x80}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x80000001, 0x129440) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:56 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x268000, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x268000, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000001900)={'syz', 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8c0, 0xfffffff7, 0xe0000000}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x7, 0x1, 0x6}) r3 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000240)={0x4, 0x7, 0x4, 0x10, 0x8, {r4, r5/1000+10000}, {0x2, 0x2, 0xf, 0x0, 0x80, 0x1, "8baf821a"}, 0x2, 0x2, @userptr=0x8, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x9931, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x8, 0x20, 0x7}) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r9 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x8d6d, 0x39, 0x9}) 04:09:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x404c090}, 0x80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7f, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x28cd) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x94130, 0xffffffffffffffff, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x549, 0x480c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0xd3, 0x81, 0x101}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r2}) 04:09:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffdffffd, 0x38442) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x7fffffff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080)={0x267a, [0x6, 0x5], 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r9 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x8d6d, 0x39, 0x9}) 04:09:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffdffffd, 0x38442) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x7fffffff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080)={0x267a, [0x6, 0x5], 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) 04:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r9 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x8d6d, 0x39, 0x9}) 04:09:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffffffdffffd, 0x38442) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x7fffffff, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080)={0x267a, [0x6, 0x5], 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:09:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4, 0x1, 0x4000001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10000) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 1: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x1a1003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 4: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:09:57 executing program 0: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 4: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x1a1003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x3, @empty, 0x5}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r4}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10000) 04:09:57 executing program 2 (fault-call:0 fault-nth:0): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:57 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:57 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:09:57 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f00000003c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r6}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) 04:09:57 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:09:57 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x3f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x109000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000000)={r2}) 04:09:57 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x5, 0x440400) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x1000) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x9, 0x355401) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x91c5, 0x401, 0x7}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x7, 0x3f, 0xb8e8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x9, 0x101, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x73500000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) [ 3561.842878] FAULT_INJECTION: forcing a failure. [ 3561.842878] name failslab, interval 1, probability 0, space 0, times 0 04:09:57 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f0000000200)) 04:09:57 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) syz_init_net_socket$x25(0x9, 0x5, 0x0) [ 3561.902582] CPU: 1 PID: 32135 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3561.910504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3561.919870] Call Trace: [ 3561.922471] dump_stack+0x1b2/0x281 [ 3561.926106] should_fail.cold+0x10a/0x149 [ 3561.930289] should_failslab+0xd6/0x130 [ 3561.934274] kmem_cache_alloc+0x28e/0x3c0 [ 3561.938428] getname_flags+0xc8/0x550 [ 3561.942234] do_sys_open+0x1ce/0x410 [ 3561.945951] ? filp_open+0x60/0x60 04:09:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x40000000000000, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000200)) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1ff, 0x30000) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6000000000, 0x2601) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB="75bf01000000000000000000"]) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xfffffff7, 0x2, 0x800001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:58 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) [ 3561.949623] ? __do_page_fault+0x159/0xad0 [ 3561.953860] ? do_syscall_64+0x4c/0x640 [ 3561.957834] ? SyS_open+0x30/0x30 [ 3561.961295] do_syscall_64+0x1d5/0x640 [ 3561.965193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3561.970380] RIP: 0033:0x419554 [ 3561.973566] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3561.981271] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3561.988534] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c [ 3561.995898] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 [ 3562.003164] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3562.010441] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 04:09:58 executing program 2 (fault-call:0 fault-nth:1): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:58 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=[0xa5a, 0x9, 0x404], &(0x7f0000000280)=[0x8001], &(0x7f00000002c0)=[0x15b, 0x1], &(0x7f0000000340)=[0x92, 0x4, 0x0, 0x2, 0x7f, 0x8001, 0x605]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:09:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), 0xffffffffffffffff, 0x7}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x20, 0x0, [0x2, 0x7, 0x3, 0x7ff, 0x101, 0x85c0, 0x9, 0x80000001, 0x4, 0x3ff, 0x0, 0x1, 0x7fffffff, 0x4, 0x7, 0x7f]}, {0x8, 0x0, [0xb9f, 0x9, 0x0, 0x9, 0x7fff, 0x1, 0x40, 0x8, 0xff, 0xb8f, 0x10001, 0x1, 0x3, 0x4, 0x6, 0x2]}, {0x0, 0x0, [0x9, 0xfffffffc, 0xffff, 0x180, 0x6, 0x2, 0x1, 0x250f, 0x6, 0x7, 0x1ff, 0x6, 0x2, 0x800, 0x9, 0x7]}, {0x10, 0x0, [0xffffffff, 0x2, 0x8001, 0x400, 0x1ff, 0x1, 0x79, 0x0, 0x79, 0x1, 0x1, 0x7, 0x80000000, 0x7, 0x6, 0x6]}, {0x21, 0x0, [0x8, 0x8001, 0x4, 0x1, 0x4727, 0xd, 0x3f, 0x80, 0xffff, 0x5c, 0xffffffff, 0x3, 0x4, 0x3f, 0x0, 0xffff]}, {0x0, 0x0, [0x6, 0x8, 0x2, 0x0, 0xc14, 0x6, 0xb3b3, 0x800, 0x1000000, 0x0, 0x400, 0x6, 0x800, 0x1e, 0xfffffffa, 0xfffffe00]}], 0xffffffffffffffff, 0x1, 0x1, 0x1b0}}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x6, 0x20002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:09:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7fffffff, 0x8, 0x80}) syz_open_procfs$userns(0x0, &(0x7f00000000c0)='ns/user\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x4, 0x5, 0x7901, 0xf482, 'syz0\x00', 0x1ff}) 04:09:58 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r2, 0x0, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:09:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket(0xf, 0x80000, 0xd90a) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:09:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3562.140151] FAULT_INJECTION: forcing a failure. [ 3562.140151] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3562.152005] CPU: 1 PID: 32177 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3562.159890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3562.169248] Call Trace: [ 3562.171847] dump_stack+0x1b2/0x281 [ 3562.175483] should_fail.cold+0x10a/0x149 [ 3562.179640] __alloc_pages_nodemask+0x22c/0x2720 [ 3562.184403] ? __lock_acquire+0x5fc/0x3f20 04:09:58 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) [ 3562.188642] ? get_pid_task+0x91/0x130 [ 3562.192542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 3562.192557] ? lock_downgrade+0x740/0x740 [ 3562.192572] ? get_pid_task+0xb8/0x130 04:09:58 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xffffffff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) [ 3562.192585] ? proc_fail_nth_write+0x7b/0x180 04:09:58 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3562.192592] ? proc_tgid_io_accounting+0x7a0/0x7a0 04:09:58 executing program 2 (fault-call:0 fault-nth:2): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:58 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x3}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x8, 0x2, {0x0, 0x2710}, {0x3, 0x0, 0x6, 0xe2, 0x0, 0x0, "9d3b2da2"}, 0x80, 0x1, @fd=0xffffffffffffffff, 0x8}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x2893800) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000100)={0x20, 0x3, 0x4, 0x20, 0x3, {0x0, 0xea60}, {0x4, 0x1, 0x0, 0x6, 0xf4, 0xe0, "9c11d9ba"}, 0x7fffffff, 0x1, @planes=&(0x7f00000000c0)={0x7, 0x7, @fd=r1, 0x2}, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0x3}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0x1, 0x5, 0x7ff, 0x800, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000380)={0x1, 0xfff, 0x40, 0x80000, r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r7, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000020}, 0x4004004) 04:09:58 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) [ 3562.192606] cache_grow_begin+0x91/0x630 [ 3562.192621] ? check_preemption_disabled+0x35/0x240 [ 3562.192632] cache_alloc_refill+0x273/0x350 [ 3562.192644] kmem_cache_alloc+0x333/0x3c0 [ 3562.192658] getname_flags+0xc8/0x550 [ 3562.192670] do_sys_open+0x1ce/0x410 [ 3562.192679] ? filp_open+0x60/0x60 [ 3562.192692] ? __do_page_fault+0x159/0xad0 [ 3562.192702] ? do_syscall_64+0x4c/0x640 [ 3562.192709] ? SyS_open+0x30/0x30 [ 3562.192719] do_syscall_64+0x1d5/0x640 [ 3562.192736] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3562.192745] RIP: 0033:0x419554 [ 3562.192749] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3562.192759] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3562.192764] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c [ 3562.192769] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 [ 3562.192774] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3562.192779] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 [ 3562.436416] FAULT_INJECTION: forcing a failure. [ 3562.436416] name failslab, interval 1, probability 0, space 0, times 0 [ 3562.436431] CPU: 0 PID: 32207 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3562.436439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3562.436442] Call Trace: [ 3562.436459] dump_stack+0x1b2/0x281 [ 3562.436474] should_fail.cold+0x10a/0x149 [ 3562.436491] should_failslab+0xd6/0x130 [ 3562.436506] kmem_cache_alloc+0x28e/0x3c0 [ 3562.436522] get_empty_filp+0x86/0x3e0 [ 3562.436532] path_openat+0x84/0x2970 [ 3562.436552] ? get_pid_task+0x91/0x130 [ 3562.436568] ? path_lookupat+0x780/0x780 [ 3562.436582] ? trace_hardirqs_on+0x10/0x10 [ 3562.436602] do_filp_open+0x179/0x3c0 [ 3562.436613] ? may_open_dev+0xe0/0xe0 [ 3562.436622] ? __alloc_fd+0x1be/0x490 [ 3562.436635] ? lock_downgrade+0x740/0x740 [ 3562.436647] ? do_raw_spin_unlock+0x164/0x220 [ 3562.436658] ? _raw_spin_unlock+0x29/0x40 [ 3562.436666] ? __alloc_fd+0x1be/0x490 [ 3562.436681] do_sys_open+0x296/0x410 [ 3562.436691] ? filp_open+0x60/0x60 [ 3562.436702] ? __do_page_fault+0x159/0xad0 [ 3562.436711] ? do_syscall_64+0x4c/0x640 [ 3562.436718] ? SyS_open+0x30/0x30 [ 3562.436728] do_syscall_64+0x1d5/0x640 [ 3562.436743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3562.436752] RIP: 0033:0x419554 [ 3562.436757] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3562.436768] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3562.436773] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c [ 3562.436779] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 [ 3562.436784] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3562.436789] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 04:09:59 executing program 2 (fault-call:0 fault-nth:3): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:09:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x99a5b72cabeaa48) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000140)={r2}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r6, 0x6}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000003c0)) socketpair(0x1a, 0x4, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$rxrpc(r8, &(0x7f00000002c0)="b3b3246f54fe4f273e1817498e9d40542bed8544492f2604a92e9e77762f16b3eb00906d9e0ea6f2c195361f7fcbb0ac11512912b0d33f9011aa42bbccf3c933e94fa56913ff1b848f0c04f48c14eaf0163f1cc8a5068a80fc212038e23eaa20ae6bcda311f8cca28d8b330ff9c2ad7b28224793d94488caf75d61053f", 0x7d, 0x4000000, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x7, 0xff, 0x180000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000200)={0x1, 0x4, 0x4, 0x800, 0x5, {}, {0x2, 0x8, 0x81, 0x1, 0xb1, 0x20, "ea28e022"}, 0x3f, 0x3, @offset=0x3e2, 0x9}) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0xa8, 0x1, 0x2}, &(0x7f0000000100)=[{}, {}]) 04:09:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000080)={r5}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r2, 0x7a, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @multicast2}}}, 0x118) 04:09:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:09:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x3, 0x9, 0x4, 0x0, 0xfff, {}, {0x2, 0xd, 0x8, 0xff, 0x8, 0x0, "5383c576"}, 0x8001, 0x4, @planes=&(0x7f0000000040)={0x9e, 0x2, @userptr=0xcbaa, 0x7}, 0x6, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x7fff, 0x6, 0x4, 0x1, 0x3, {r2, r3/1000+60000}, {0x3, 0x8, 0x2, 0x4, 0x40, 0xc1, "678004ed"}, 0x0, 0x3, @fd, 0x575b27cf, 0x0, r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) [ 3563.017693] FAULT_INJECTION: forcing a failure. [ 3563.017693] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.048038] CPU: 1 PID: 32235 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3563.055961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.065322] Call Trace: [ 3563.067929] dump_stack+0x1b2/0x281 [ 3563.071569] should_fail.cold+0x10a/0x149 [ 3563.075727] should_failslab+0xd6/0x130 [ 3563.079706] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3563.084382] drm_open+0x270/0x1010 [ 3563.087926] ? drm_minor_acquire+0x170/0x170 [ 3563.092342] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3563.097447] ? drm_event_reserve_init_locked+0x220/0x220 [ 3563.102908] drm_stub_open+0x27b/0x400 [ 3563.106792] ? drm_minor_acquire+0x170/0x170 [ 3563.114419] chrdev_open+0x23c/0x6d0 [ 3563.118179] ? __register_chrdev+0x3d0/0x3d0 [ 3563.122569] do_dentry_open+0x44b/0xec0 [ 3563.126563] ? __register_chrdev+0x3d0/0x3d0 [ 3563.130953] ? __inode_permission+0xcd/0x2f0 [ 3563.135383] vfs_open+0x105/0x220 [ 3563.138825] path_openat+0x628/0x2970 [ 3563.142631] ? path_lookupat+0x780/0x780 [ 3563.146684] ? trace_hardirqs_on+0x10/0x10 [ 3563.150904] do_filp_open+0x179/0x3c0 [ 3563.154704] ? may_open_dev+0xe0/0xe0 [ 3563.158494] ? lock_downgrade+0x740/0x740 [ 3563.162621] ? do_raw_spin_unlock+0x164/0x220 [ 3563.167099] ? _raw_spin_unlock+0x29/0x40 [ 3563.171243] ? __alloc_fd+0x1be/0x490 [ 3563.175048] do_sys_open+0x296/0x410 [ 3563.178747] ? filp_open+0x60/0x60 [ 3563.182273] ? __do_page_fault+0x159/0xad0 [ 3563.186487] ? do_syscall_64+0x4c/0x640 [ 3563.190446] ? SyS_open+0x30/0x30 [ 3563.193902] do_syscall_64+0x1d5/0x640 [ 3563.197783] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3563.202951] RIP: 0033:0x419554 [ 3563.206122] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 04:09:59 executing program 2 (fault-call:0 fault-nth:4): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:59 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3f7e4e3b766"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80801) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) [ 3563.213816] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3563.221075] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c [ 3563.228324] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 [ 3563.235574] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3563.242822] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 [ 3563.292032] FAULT_INJECTION: forcing a failure. [ 3563.292032] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.305764] CPU: 1 PID: 32263 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3563.313672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.323032] Call Trace: [ 3563.325637] dump_stack+0x1b2/0x281 [ 3563.329277] should_fail.cold+0x10a/0x149 [ 3563.333434] should_failslab+0xd6/0x130 [ 3563.337416] kmem_cache_alloc_trace+0x29a/0x3d0 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) [ 3563.342090] drm_open+0x270/0x1010 [ 3563.345629] ? drm_minor_acquire+0x170/0x170 [ 3563.350028] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3563.355120] ? drm_event_reserve_init_locked+0x220/0x220 [ 3563.360561] drm_stub_open+0x27b/0x400 [ 3563.364447] ? drm_minor_acquire+0x170/0x170 [ 3563.368860] chrdev_open+0x23c/0x6d0 [ 3563.372660] ? __register_chrdev+0x3d0/0x3d0 [ 3563.377069] do_dentry_open+0x44b/0xec0 [ 3563.381038] ? __register_chrdev+0x3d0/0x3d0 [ 3563.385447] ? __inode_permission+0xcd/0x2f0 [ 3563.389858] vfs_open+0x105/0x220 [ 3563.393316] path_openat+0x628/0x2970 [ 3563.397143] ? path_lookupat+0x780/0x780 [ 3563.401183] ? trace_hardirqs_on+0x10/0x10 [ 3563.405418] do_filp_open+0x179/0x3c0 [ 3563.409219] ? may_open_dev+0xe0/0xe0 [ 3563.413031] ? lock_downgrade+0x740/0x740 [ 3563.417169] ? do_raw_spin_unlock+0x164/0x220 [ 3563.421651] ? _raw_spin_unlock+0x29/0x40 [ 3563.425779] ? __alloc_fd+0x1be/0x490 [ 3563.429564] do_sys_open+0x296/0x410 [ 3563.433259] ? filp_open+0x60/0x60 [ 3563.436782] ? __do_page_fault+0x159/0xad0 04:09:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3563.441033] ? do_syscall_64+0x4c/0x640 [ 3563.444991] ? SyS_open+0x30/0x30 [ 3563.448424] do_syscall_64+0x1d5/0x640 [ 3563.452299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3563.457465] RIP: 0033:0x419554 [ 3563.460632] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3563.468330] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3563.475583] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c [ 3563.482850] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 04:09:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x1}}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) clock_getres(0x0, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) 04:09:59 executing program 2 (fault-call:0 fault-nth:5): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:09:59 executing program 1: syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x40002) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) 04:09:59 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x141000) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x282281) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x8001, 0x1, 0x1001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) [ 3563.490103] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3563.497355] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) [ 3563.604691] FAULT_INJECTION: forcing a failure. [ 3563.604691] name failslab, interval 1, probability 0, space 0, times 0 [ 3563.623235] CPU: 1 PID: 32291 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 3563.631148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3563.640504] Call Trace: [ 3563.643103] dump_stack+0x1b2/0x281 [ 3563.646742] should_fail.cold+0x10a/0x149 [ 3563.650897] should_failslab+0xd6/0x130 [ 3563.654924] kmem_cache_alloc_trace+0x29a/0x3d0 [ 3563.659598] ? vgem_prime_import_sg_table+0x280/0x280 [ 3563.664787] vgem_open+0x40/0xd0 [ 3563.668155] drm_open+0x6e2/0x1010 [ 3563.671699] ? drm_event_reserve_init_locked+0x220/0x220 [ 3563.677155] drm_stub_open+0x27b/0x400 [ 3563.681042] ? drm_minor_acquire+0x170/0x170 [ 3563.685589] chrdev_open+0x23c/0x6d0 [ 3563.689300] ? __register_chrdev+0x3d0/0x3d0 [ 3563.693712] do_dentry_open+0x44b/0xec0 [ 3563.697677] ? __register_chrdev+0x3d0/0x3d0 [ 3563.702078] ? __inode_permission+0xcd/0x2f0 [ 3563.706487] vfs_open+0x105/0x220 [ 3563.709944] path_openat+0x628/0x2970 [ 3563.713751] ? path_lookupat+0x780/0x780 [ 3563.717812] ? trace_hardirqs_on+0x10/0x10 [ 3563.722049] do_filp_open+0x179/0x3c0 [ 3563.725845] ? may_open_dev+0xe0/0xe0 [ 3563.729641] ? lock_downgrade+0x740/0x740 [ 3563.733769] ? do_raw_spin_unlock+0x164/0x220 [ 3563.738355] ? _raw_spin_unlock+0x29/0x40 [ 3563.742488] ? __alloc_fd+0x1be/0x490 [ 3563.746277] do_sys_open+0x296/0x410 [ 3563.749975] ? filp_open+0x60/0x60 [ 3563.753505] ? __do_page_fault+0x159/0xad0 [ 3563.757722] ? do_syscall_64+0x4c/0x640 [ 3563.761677] ? SyS_open+0x30/0x30 [ 3563.765109] do_syscall_64+0x1d5/0x640 [ 3563.769018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3563.774186] RIP: 0033:0x419554 [ 3563.777353] RSP: 002b:00007fc4192fecc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3563.785142] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000419554 [ 3563.792392] RDX: 000000000002ca00 RSI: 00007fc4192fed60 RDI: 00000000ffffff9c 04:09:59 executing program 2 (fault-call:0 fault-nth:6): syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:09:59 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x80300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100, 0x2080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x9, 0x8, 0xfffffffd}) [ 3563.799646] RBP: 00007fc4192fed60 R08: 0000000000000000 R09: 0023647261632f69 [ 3563.806897] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002ca00 [ 3563.814153] R13: 00007ffdab86735f R14: 00007fc4192ff300 R15: 0000000000022000 04:09:59 executing program 2: socketpair(0x1d, 0x6, 0x33, &(0x7f0000000000)={0xffffffffffffffff}) sendto$rxrpc(r0, &(0x7f0000000040)="d38af53ce95364df837a08fe27638db63908a30a31f319e372fa8d5bab2a0f52ee424e14ea7db5c9d95ff5205218a2ba2b4edee7b3d33a42391e51f6c9cc6a9016a7720215e4d0cf35ff22f9141b31bc2cefdc0475e7e801e4d66fb6d7", 0x5d, 0x4000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:09:59 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:09:59 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x7fff, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x101, 0x5, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x6) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:00 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xffffffff, @local, 0x4}, {0xa, 0x4e22, 0x8000, @ipv4={[], [], @local}, 0x19b}, r1, 0x4}}, 0x48) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000000)) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x444180) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x20000) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x8, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x148, 0x480502) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000080)=0xc8cd) 04:10:00 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xc1, 0x4900) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x64c002, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000180)) write$fb(r0, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000100)={0x5, 0x20, [0x0, 0x7, 0x67, 0x4, 0x2, 0x0, 0x2, 0x9]}) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xd972, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r6 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_LOW_DMA(r6, 0x227a, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x40, 0x4611, 0x7fffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x3b}, 0x9}, {0xa, 0x4e21, 0x101, @mcast2, 0x8000}, 0xffffffffffffffff, 0x5}}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r2}) 04:10:00 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4ad8ebe6, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, @ib={0x1b, 0xf3, 0x0, {"c17485c05bce7b74719f1e300a23fec8"}, 0x3, 0x200, 0x7}, @ib={0x1b, 0x7, 0x7, {"4d76279145ceae2c44513693194a3ed7"}, 0x40, 0x4, 0x6}}}, 0x118) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 04:10:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20085}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x78, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x54) r2 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x401, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0xb6d, 0x6, 0x200, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000300)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x56, 0xc, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x7f, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r7}) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7ff, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x80) 04:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x7cc) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x8, 0xa}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x7, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0x15, 0x4, 0x5a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x24, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040010) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000300)) ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000240)) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r6, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="13400000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25080000000600280002000000060028000000000008003c0004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) r8 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x100000001, 0x109040) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"]) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400007, 0x0, 0xfffffffd}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:00 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x80000000, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@null=' \x00', 0xb, 'hsr0\x00'}) 04:10:00 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x81, 0x5, 0x4400}) sendto$rxrpc(r0, &(0x7f0000000540)="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", 0x1000, 0x8000, 0x0, 0x0) 04:10:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x5, 0x400102) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:00 executing program 0: ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xeea9, 0x2248c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x1, 0x6}) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0xfe, 0x0, &(0x7f0000000040), &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000001c0)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) 04:10:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x5, 0x220f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x3, 0xffffffff, 0x2}) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xf4a, 0x5, 0x101}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x1, 0x2, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x143, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x69, 0x14, [0x80000000, 0x2, 0x1, 0x7, 0x80000001]}) 04:10:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400, 0x7f, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xd1, 0x208202) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000300)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x10000) ioctl$SIOCX25GCAUSEDIAG(r3, 0x89e6, &(0x7f0000000080)={0x7, 0x2c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r4, 0x80045500, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x24600) 04:10:01 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x5, 0x3f, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000340)={r1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x12a, 0x5}}, 0x20) socketpair(0x6, 0xa, 0x0, &(0x7f00000002c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x800, "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", 0x7f, 0x0, 0x9, 0x70, 0xc2, 0x1, 0x2, 0xfd}, r7}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r4, 0x0, 0x2, 0x4}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r4, 0xc, 0x1, @in={0x2, 0x4e20, @empty}}}, 0xa0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x2ca00) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = gettid() setpgid(r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000080)) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r1 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8, 0x200c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x4f5, 0x1, 0x6}) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x1, 0xff}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xffc00000, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x1c4, {"f74eaeb401bc0ad1285edc76094ffe24"}, 0x900000000000000, 0x9, 0xffff}, @in6={0xa, 0x4e21, 0xfff, @loopback}}}, 0x118) 04:10:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@rc={0x1f, @fixed}, &(0x7f0000000100)=0x80) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000140)={0x3, 0x6, 0x2ee, 0x200, 'syz0\x00'}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x41, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000600)={{0x3, 0x6, 0x200}, 0x1, [0x5fc, 0x5c90, 0x9, 0x3ddb920, 0x1f, 0x1, 0x3, 0x2, 0x9, 0x200, 0x9, 0x4, 0x1, 0x4, 0x1ff, 0x1ff, 0x401, 0x5, 0x51, 0x8, 0x159, 0x200, 0x400, 0x8, 0x8, 0xfffffffffffffff9, 0x100000000, 0x0, 0x0, 0x9, 0x4, 0x4, 0x5, 0x7, 0x8, 0x7, 0x1, 0xef, 0x10000, 0x5, 0x8, 0x6, 0x101, 0x300, 0x7, 0x9, 0xf45, 0x0, 0x2, 0x3f, 0x4, 0x9, 0x7ad, 0x1f, 0x200c, 0x9, 0x10001, 0x5, 0x7, 0xb2, 0x80000000, 0x3, 0xd3a, 0xdf, 0x81, 0xffffffffffffffe0, 0x426, 0x81, 0xfffffffffffffe01, 0x6, 0x2, 0x5, 0x0, 0x8, 0x101, 0x7, 0x66b, 0x6, 0x80000000, 0x4, 0xffffffffffffc978, 0x2, 0x330, 0x3, 0x3, 0x3ff, 0xfa, 0x1f, 0x1, 0x2, 0x788, 0x8000, 0x101, 0x8, 0x800, 0xffffffffffffffc0, 0x4, 0x8, 0x0, 0xff, 0x99, 0x8, 0x0, 0x4, 0xd5e8, 0x3, 0x1, 0x81, 0x6, 0xa3, 0x7, 0x6db6, 0x8, 0x1000, 0x9, 0x6, 0x1, 0x80000000, 0x0, 0x5, 0xffffffffffffffb9, 0x9b, 0x7, 0x2, 0xeb23, 0x81, 0x7d, 0x785]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:01 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/dev/dri/card#\x00') ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) ptrace$cont(0x18, r1, 0xe7, 0xfaa5) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x38, 0x0, 0x9}) 04:10:02 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4048890) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x3, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x6, 0x800}) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r4, 0x0, 0x0) write$fb(r4, &(0x7f0000000080)="1de3bd279660f530f088d4ac94e34ff0eedfe42cacd6ec1ecca1a0d8d00e9c869cf90089942c839cb2f04a0f8299c04c34156a72ee54e166119fe1a102ec02ca19e6c332e7b7b39a64729a8075eb5725695664a49e4ee2a1f2f9ed7c51b6ad", 0x5f) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000600)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66e82426"}, 0x0, 0x0, @userptr}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x4, 0x4, {r1, r2/1000+60000}, {0x1, 0x1, 0xff, 0x0, 0x81, 0x9, "b932d6b9"}, 0x0, 0x1, @offset=0x3ff, 0xff}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x90402) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x1a) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x60004}, 0x8040) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x22003) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000001c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000340)=[{0x0, 0x0, [0x7, 0x10000, 0x3f, 0x4, 0xfff, 0x11c, 0x1f, 0x15, 0x4, 0x6, 0x5, 0x1, 0x9, 0x8, 0x4, 0x8]}, {0x2, 0x0, [0xfffffffd, 0x5, 0x20, 0x7, 0x7ff, 0x3800000, 0xfffffffa, 0x7ff, 0x2, 0x2, 0x9, 0x930, 0x9, 0x1, 0x5, 0x8]}, {0x2, 0x0, [0x0, 0xa5c, 0x3f, 0x9, 0x9, 0x7fff, 0x6, 0x9, 0x9, 0xc2ef, 0xffffffca, 0x5, 0x101, 0xffffffff, 0x8, 0x3]}, {0x10, 0x0, [0xb, 0x3f, 0xfff, 0x30000000, 0xfff, 0x8, 0x5e13, 0x2, 0x3, 0x10001, 0x9, 0x7fffffff, 0x3f, 0x6, 0x7, 0x9]}, {0x4, 0x0, [0xc7d, 0x7, 0x4, 0x9e6, 0xf9, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x839, 0x10000081, 0x5, 0x5d, 0x0, 0x1, 0x101]}], r1, 0x1, 0x1, 0x168}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) socketpair(0x25, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x80, 0x46}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xff) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x141041) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8, 0x9, 0x800, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x10b000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xff, 0x80, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @private1, 0x3}}, 0x24) 04:10:02 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfff, 0x109022) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x7fff, 0x82042) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000000c0)=""/131) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x400, 0x8, [0x9, 0x92]}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x424002) r2 = getpgrp(0xffffffffffffffff) getpgid(r2) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) r4 = getpgid(r3) getpgrp(r4) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000006, 0x6000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x200, 0x131040) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a19}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3ff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80d0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0xffffffff, 0x2, 0x400}) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x0, 0xba, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000140)={r5}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x80000000, 0x82000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f00000001c0)=0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000180)={0xfffffeff, 0x9, &(0x7f0000000000)=[0x6, 0x3ff, 0x1, 0x1000, 0x4, 0x7f, 0x6, 0x400, 0x0], &(0x7f0000000040)=[0x2], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x2, 0x4, 0x7b, 0x8, 0x98, 0xffff, 0x800, 0x4, 0x2]}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r1, 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0xffff, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}) socketpair(0x15, 0x80000, 0x7, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x2, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:02 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f00000001c0)={0x4, 0x1, "dae54d", 0x7, 0x7b}) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x7fffffff, 0x40) ioctl$SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f0000000240)) write$fb(r1, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000080)={0x3c0, 0xa0, 0x1000, 0x1e0, 0x8, 0x0, 0x18, 0x2, {0x6, 0x4232, 0x1}, {0x8, 0x401, 0x1}, {0x0, 0x734e}, {0x7f, 0x1000, 0x1}, 0x1, 0x2, 0x200, 0x7, 0x1, 0xc044, 0x4, 0x7, 0x0, 0x6, 0x7f, 0x7, 0x20, 0x1, 0x1, 0x7}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:02 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x8ce9, 0x2, 0x4, 0x400, 0x3, {0x77359400}, {0x8f514f567fc8c91b, 0xc, 0x81, 0x2, 0x4, 0x3f, "dc320b40"}, 0x84, 0x4, @fd, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)={0x2, 0x3, 0x4, 0x4000, 0x1, {0x77359400}, {0x4, 0x8, 0x3, 0x3, 0x20, 0x6, "fc6b64d7"}, 0x80, 0x3, @planes=&(0x7f0000000080)={0x9, 0x80, @fd, 0x5da}, 0x9, 0x0, r1}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x0, 0x8001, 0x3, 0x800}) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7f, 0xe2b00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x8}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0x2, 0x5, 0x800, 0x4000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="800128c47000fbdbdf2502000068aa03d18fc5e4480008002b0008000000080039000800e900080031000300000008000000000000007c0b30edba5338f1a14108c73d2d92323d59d4d3b5b7618bafb28c9c15ed3335662f11b1a4d81d5c0ac9480ba95fe77a420f95ec89b3407d1d480fdf5fb1cae962404f55e56a46830292952ae7d6d45da324"], 0x3c}, 0x1, 0x0, 0x0, 0x4040094}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b2d8890d0d2a"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x39}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0xa0}, 0x8810) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0xa9ddab92, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 2: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="8881572e68923d56c62fdef0a0083c9d46313a6dd4df22543dfd070f3a01a295a13a3673893b667e89dfbdd26ddd952891a2b82078cc592cea35abab4f1e818e1803349c97d87f2e674ce3cf11", 0x4d) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x80c00) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x3f, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5, 0x40, 0x7969, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3, 0x2000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:02 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000008c0)={0x7, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0xd, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r4}}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x3, {0xa, 0x4e23, 0x81, @ipv4={[], [], @remote}, 0x20000000}, r4}}, 0x38) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x5829, 0x400) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001540)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = getpgrp(0xffffffffffffffff) getpgid(r5) setpgid(0xffffffffffffffff, r5) recvmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@ax25={{0x3, @null}, [@rose, @default, @null, @null, @netrom, @bcast, @null, @null]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/64, 0x40}], 0x1}, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) r6 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x4d6140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x80000000}) 04:10:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:02 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x2, 0x2ca00) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x200000) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000540)={0x1000, 0x5, 0xffffff01, "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"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x9}) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) 04:10:02 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffff3fb, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x80100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:03 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xff7ffffffffffffe, 0x2ca00) 04:10:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3f, 0x2, 0xb3, 0x2, 0x0, 0x10, 0x8000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x313, 0x0, @perf_config_ext={0x2, 0x3f}, 0x10, 0x9e75, 0x7, 0x4, 0x9, 0xc45d, 0xd18c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x533) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7, 0x8000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:03 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x20004045) 04:10:03 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000280)=0x80, 0x80000) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f00000002c0)={0xd3, [0xcb, 0x4]}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000300)=0x1000) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000100)) 04:10:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:03 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') 04:10:03 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xff, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3, 0x1}) 04:10:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:03 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@remote={[], 0x1}, 0x6, 'macvlan0\x00'}) r1 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x3, 0x4200) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xb002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x8, 0x20002) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x4, 0x80000000, 0x3f, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000600)={0x20, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x81, 0x2}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000001c0)={0x7, 0x4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in=@initdev}}, {{@in=@empty}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x4, 0x7, {0x0, 0x2710}, {0x2, 0x2, 0x6, 0x6, 0x0, 0x2, "12fe5d1d"}, 0x9, 0x1, @userptr=0x7fffffff, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000600)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66e82426"}, 0x0, 0x0, @userptr}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x3, 0xf, 0x4, 0x1000, 0x4, {0x77359400}, {0x4, 0x2, 0x1, 0x3, 0x0, 0x80, "9769b18d"}, 0x8, 0x2, @fd, 0x0, 0x0, r3}) 04:10:04 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffd1c7, 0x0, 0x0, 0x0, 0x40}, [@alu={0x7, 0x0, 0xc, 0x4, 0xa, 0xffffffffffffffe8, 0xffffffffffffffef}, @generic={0x8c, 0x6, 0x6, 0x3, 0x2}, @generic={0x3, 0xe, 0x6, 0x7af9, 0x6}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x1, 0x1, 0x0, 0x7, 0x6, 0x20, 0x4}, @map={0x18, 0x6}]}, &(0x7f00000000c0)='GPL\x00', 0xffff, 0x6e, &(0x7f0000000100)=""/110, 0x41100, 0x2, [], r0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x9}, 0x10, 0x0, r1}, 0x78) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x2540e1) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1f, 0x200000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r5}) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="f7380e11fcc5ade4e25725fc1630006e6e9e670c27dce2f0407b46a9d16125208accdc82090962c6f2bcc5bf1bfeb448a817b04dec07cdff462032ad66234c3fe9f469682fd27078ed0c3a429c5b50a7674c21b29319898a3dd15b3fcb2203d36d65934486ccf98a8c75b9e9984ddff1a8a056eb714005e79cdbf2bee326692db8d0ef77ae87c853596131b7594aeaeb9128c335dacff7587e36417c761ec10c97637964c93b50efc8794b4adf53b9b12d4e8a2bc5f2a9a9b9131c5b43", 0xbd) r6 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x200080) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000240)={r9}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x48f246987da004ca) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x181501) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x40000) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x200200) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc040}, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) 04:10:04 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="080027bd7000c99c4e4fb55cb175ec9d45c5fcdbdf25030000000a000900ffffffffffff000008003a841fae0000050035000700000008002b0006000000080034000800000008003400"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x48081) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x9, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}, @ib={0x1b, 0x3, 0x4, {"3bb207aee57aec4a096f1038d4789fbb"}, 0xffff, 0xaa46, 0x8}}}, 0x118) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x29343972, 0xfffffff9, 0xc8, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x100000001, 0x201) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) socket$inet(0x2, 0x80000, 0x100) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x5) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x82000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x80, 0x7, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x8, 0x6ca00) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket(0x18, 0x0, 0x1) connect$rxrpc(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdb7}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4024840}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}]}, 0x1c}}, 0x8800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x5, 0x402800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x4, 0x80, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r4}) r5 = socket$inet(0x2, 0x6, 0x4) socket$inet(0x2, 0x2, 0x40000000) accept4(r5, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000000)=0x80, 0x0) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) 04:10:04 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4840) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x8c2c, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:04 executing program 1: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x4, 0x38, 0xf3424b0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r0}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000000)=""/226, 0xe2}, {&(0x7f0000000100)=""/70, 0x46}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/147, 0x93}], 0x7, &(0x7f00000003c0)=""/185, 0xb9}, 0x0) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000100)=""/188) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000200)={0xce, 0x10, [0x200, 0x7f, 0x0, 0x7]}) r4 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x1, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000003c0)={0xfffffffd, 0x9, 0x80000001}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000240)={0x101, 0x14, [0xb414, 0xfffff64c, 0x4, 0x1, 0x8000]}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x100000001, 0x21500) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000001c0)={0x1, 0x5, 0xfd60, 0xfffffffa, 'syz0\x00', 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r5, 0xc008551c, &(0x7f00000002c0)=ANY=[@ANYBLOB="dfe80000415f80edcb012e078a2400000003000000ff01000003000000ffffffff06a6339b74c20d00000005000000ff0000000000000007000000bfc8bd238c882cc76fe7270aef4fd9072da5a8ed3c13dd2c1dd069f569a8ba2b51abd0e764a6ee80192ad28e3425e2f2737a73414b24c19efb7b7e8953b57407d733754a3865a4f82b1d0f7c24c8e2bc649d788016d1c8865ae73a8b8b1b5dacf459deb76f3699426eb8bd0d0dde88a254ccdb793948eddfde1e8348b7974d06e6a6e9f857172d18cb50c34e4c0037eca8cd7ffd40f63e25"]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2cb40) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x3], 0x2) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x4, 0x10140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0xffffffe0}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x5) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 04:10:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=""/15, 0xf, 0x8001, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x9, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r2}) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:04 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={@fixed={[], 0x12}, 0x1, 0x1, 0x0, 0x6, 0x8000, "161364ce92e6d1f8f3790919775c8fd6bb482e665120c06785f6ac67520ec2df62942840a79c5508c446374a33fbb142f365e6aa99452a28459c9c4d92cbebfe81d174b2d07ee3ad12268f3e39ba5664825ca4be14822771638358be59ef3faa7bfc1e2f12beefc2abf22c6df6af9aad3fbef42510b5699835661e30c1d79886"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r2, 0x10, 0x1, @ib={0x1b, 0x0, 0x1f, {"10df1731fe6a7e29bf8c790940a0413d"}, 0x4, 0xc6, 0x4d1c}}}, 0xa0) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) socketpair(0x15, 0x5, 0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='=\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf2510000000080032000100000008003b00080000000500330000000000"], 0x2c}}, 0x841) 04:10:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xa1aaaf12b41221, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r2, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xaa, 0x1f, 0x6, 0x0, 0x0}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x8004, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r3}) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r5, r6, 0x7, 0x78, &(0x7f00000001c0)="b6809e568b1b69069d6a2b76fceec1dd4ba5470f5e9fe0dd32dce53869e5d557b820a3a58ae0e6fec0c1b7a3773bfef0ea362f221ed9023efe595e71f9a6717075b537a85b8d6e5ac04da703dd105e379c21b24b660bb879c06671d2b9a9ccf3dde42e80d82a7298d4dce8cb875ef68995731f6fbeead376", 0x7, 0x6, 0x100, 0xffff, 0x43, 0x1, 0x9, 'syz0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x24) 04:10:04 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:04 executing program 1: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0, 0x4f5}}, 0x24) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x2, 0x3f, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r5}) 04:10:04 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2ca40) 04:10:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x8c2c, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x11b}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x8000000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x5, 0x78, 0x7, 'syz1\x00', 0x40}, 0x1, 0x0, 0x955c, r4, 0x4, 0x73dd756a, 'syz1\x00', &(0x7f0000000080)=['/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '\x00'], 0x20, [], [0x0, 0xf44f, 0x3, 0x6]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x8084, 0x39, 0x3}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000100)={0xb, 0x10, 0xfa00, {&(0x7f0000000300), r6, 0x7}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:05 executing program 2: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x3f, 0x4, 0x4000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0xb, 0x3ff, 0x7, 0x80000, r0}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) clock_gettime(0x4, &(0x7f0000000140)={0x0, 0x0}) select(0x40, &(0x7f0000000080)={0x1, 0x5, 0xfffffffffffffff8, 0x4, 0x0, 0x7, 0x200, 0x80000000}, &(0x7f00000000c0)={0x60, 0x8, 0x6, 0x4f9d, 0x2, 0x1, 0x4, 0x1000}, &(0x7f0000000100)={0x1a5, 0x2, 0x9, 0x8, 0x80000000, 0x4, 0x7ff, 0x8001}, &(0x7f0000000180)={r1, r2/1000+60000}) 04:10:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x5829, 0x400) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000100)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001540)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}, 0x0) r5 = getpgrp(0xffffffffffffffff) getpgid(r5) setpgid(0xffffffffffffffff, r5) recvmsg$can_bcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@ax25={{0x3, @null}, [@rose, @default, @null, @null, @netrom, @bcast, @null, @null]}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/64, 0x40}], 0x1}, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) r6 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x4d6140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x2, 0x80000000}) 04:10:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)={r1}) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000000000022, 0xc580c1) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:05 executing program 1: bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x270082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x2, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0xc9}, 0x1) 04:10:05 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100228bd7000fedbdf2506000000050029000000000005002e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 04:10:05 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xfffffffffffffffe, 0x400) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000400)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000080)={{{@in, @in6=@remote}}, {{@in=@broadcast}}}, &(0x7f00000001c0)=0xe8) r5 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x7, 0x800004) r6 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000005c0)) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x8, 0x1, 0xfff, 0x8000, '\x00', 0x60}, 0x1, [0x1, 0x9, 0x4, 0x9, 0x3f, 0x0, 0x1f761e8a, 0x299b, 0x7, 0x7fffffff, 0x6, 0x81, 0x3, 0x4, 0x3, 0x25, 0x80000000, 0x8057, 0x1, 0x452, 0x1, 0xfffffffffffffffd, 0x6f1, 0xfff, 0xfe82, 0x0, 0x1ff, 0x3020, 0xbe4, 0x2, 0x1000, 0x7fffffff, 0x100000001, 0x7fffffff, 0x9, 0x3, 0x5, 0x80000000000000, 0x7, 0x9, 0x1000, 0x2, 0x6, 0x4, 0x6, 0x6, 0xfffffffffffff001, 0x4e1, 0x9, 0x0, 0x200, 0x5, 0x1, 0x5, 0x5, 0x24bafa56, 0x4, 0x1f, 0xb7c6, 0xf839, 0x7, 0xa1, 0x8, 0xfff, 0x7, 0xfffffffffffffffb, 0x100, 0x9, 0x6104ada00, 0x3, 0x3, 0x80000001, 0xe0000000, 0x1, 0x401, 0x3, 0x8000, 0x3, 0xadb8, 0x4, 0x7, 0x7ff, 0x0, 0x0, 0x5, 0xc4d, 0x5d, 0x21e1, 0x33f7dc5f, 0x401, 0x100000000, 0x2, 0x146, 0x400000000000, 0xfffffffffffffffe, 0x9, 0x80, 0x1, 0x3991, 0x800, 0x9, 0x8, 0x1, 0x1, 0x3, 0x20, 0x9, 0x81, 0x23cd, 0xe33, 0x34d, 0x5, 0x24a, 0xfff, 0x3, 0x100, 0x7, 0x800, 0x5, 0x200, 0x3ff, 0x3ff, 0x7, 0x1, 0xfffffffffffff1fa, 0x9, 0x3c, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r7 = socket(0x22, 0x800, 0x3) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x41) 04:10:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000200)={0x8, 0x24, [0x5, 0x7fffffff, 0x40, 0x4, 0x9, 0x401, 0x101, 0x6b8f, 0x1000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x0, 0x6}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c005}, 0x4004080) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:05 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:05 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x158, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x101, 0x9, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:05 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:05 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x40800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:05 executing program 2: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1}, 0x10041) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x800, 0x40, 0x3}) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:06 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x4, 0x141000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000200)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) r7 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x40202) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000000c0)={r6}) 04:10:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3ff, 0x3f, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:06 executing program 3: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0, 0x4f5}}, 0x24) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x2, 0x3f, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r5}) 04:10:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x8, 0xffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)={r2}) 04:10:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x60001) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x2022c0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000002c0)={0x4, 0x1, &(0x7f00000001c0)=[0x5], &(0x7f0000000200)=[0x2], &(0x7f0000000240)=[0x7, 0x8, 0x1000, 0x6, 0x1f, 0x1000, 0x1, 0x81], &(0x7f0000000280)=[0x3, 0x1, 0x7f]}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) clock_gettime(0x6, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x5, 0x2, 0x4, 0x0, 'syz1\x00', 0x80000001}, 0x1, 0x20, 0x54, r4, 0x7, 0x7fff, 'syz0\x00', &(0x7f0000000300)=['/dev/dri/card#\x00', '/dev/fb0\x00', '\f(@):\x00', '\x00', '/dev/fb0\x00', '}#/5\x00', '/dev/fb0\x00'], 0x36, [], [0x3, 0x3ff, 0x1, 0x2]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x38000000, @remote, 0x7}}, 0x24) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000100)) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:06 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000100)={0x4, 0x2, &(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)) 04:10:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x81, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) 04:10:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000080)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:06 executing program 2: write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000000)={0x8, 0x120, 0xfa00, {0x0, {0x7, 0x3, "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", 0xc4, 0x7, 0x89, 0xe7, 0x6, 0x6, 0x4, 0x1}}}, 0x128) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r1, 0xfffffc01}}, 0x10) 04:10:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:06 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x1}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r4, 0x5f638b2c}}, 0x10) 04:10:06 executing program 3: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000380)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @private0, 0x4f5}}, 0x24) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x7, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x47}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x2, 0x3f, 0x0, 0x0}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000080)={r5}) 04:10:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x200000) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:06 executing program 2: setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) r0 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000600)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66e82426"}, 0x0, 0x0, @userptr}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)={0x1000, 0xb, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x2, 0xc, 0x2, 0x2, 0xb1, 0x2, "0fd6851b"}, 0x5, 0x1, @offset=0xffffffff, 0x7fffffff, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000140)={0x9, 0x3, 0x4, 0x1, 0x2, {r2, r3/1000+60000}, {0x2, 0x2, 0x20, 0x2e, 0x40, 0x5, '(;cv'}, 0x902, 0x4, @planes=&(0x7f0000000100)={0x9, 0x1, @userptr=0xb058, 0x7b}, 0xffff, 0x0, r1}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0xff, 0x2, 0x4, 0x100000, 0x3, {}, {0x3, 0x1, 0x8, 0x1f, 0x2, 0x20, "77122665"}, 0x80000001, 0x3, @userptr=0x2, 0xfffffffa, 0x0, r4}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:06 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x3f, 0x2, 0xb3, 0x2, 0x0, 0x10, 0x8000, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x313, 0x0, @perf_config_ext={0x2, 0x3f}, 0x10, 0x9e75, 0x7, 0x4, 0x9, 0xc45d, 0xd18c}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0x533) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7, 0x8000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x44, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c001}, 0x8898) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) 04:10:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:06 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:06 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2bc, 0x2ea80) 04:10:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140)=0x1, r2, 0x0, 0x2, 0x4}}, 0x20) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="800128c47000fbdbdf2502000068aa03d18fc5e4480008002b0008000000080039000800e900080031000300000008000000000000007c0b30edba5338f1a14108c73d2d92323d59d4d3b5b7618bafb28c9c15ed3335662f11b1a4d81d5c0ac9480ba95fe77a420f95ec89b3407d1d480fdf5fb1cae962404f55e56a46830292952ae7d6d45da324"], 0x3c}, 0x1, 0x0, 0x0, 0x4040094}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r4, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b2d8890d0d2a"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x39}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0xa0}, 0x8810) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x587}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x200, 0x20140) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x6, 0x7}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xe6d8, 0x1f, 0x6, 0x0, 0x0}) r3 = getpgid(0xffffffffffffffff) syz_open_procfs$userns(r3, &(0x7f0000000000)='ns/user\x00') r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000080)='/dev/dri/card#\x00', 0xf) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) getrlimit(0xd, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x4000, 0x141000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x90601) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r5}) 04:10:07 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xa, 0x0) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000100)={0x3d, 0x2}) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000080)=""/87) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x10001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000140)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x11, 0x44a9, 0x3ff, 0x2, 0x1088, 0x1, 0x5, [], r3, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x40) 04:10:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x308, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0xc000) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r3, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x8, 0x1, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xcf3, 0x6c702) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x1, 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000000c0)=""/6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) 04:10:07 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7f, 0x42ca00) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4cc102000000cf4a", @ANYRES16=0x0, @ANYBLOB="000028bd7000fddbdf250800000008002c000400000008002b0080000000050033000100000005002d000100000005002e000100000005003000010000000000000001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040004) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf250700000005002d000100000008000300", @ANYRES32=0x0, @ANYBLOB="05002e000100000005002e00010000000a000900bbbbbbbbbbbb0000080039002e0200007a06d44a97d4e15605003000000000000800390001040000eb8a14da8a542bd584def1c3069fb491a5e05a13de9b762bb357bbe93b75515eb8ff6464928e209257d859bb45bac9c0b2b9ed"], 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x40d4) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0x7, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0xffff, 0x1ff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 3: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x308, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000440)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0xaec, 0x1, 0x80000000, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x20820) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x3, 0x569a80) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f00000000c0)=0xbc4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x7, 0x80, 0x2d7}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000040)={0xffff, 0x1c, [0xfffffffa, 0x91e, 0x1, 0x2, 0x7ba7, 0x80, 0x2000000]}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x4, 0x0, 0x3b, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xbcd, 0x440840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8100, 0x1, 0x1, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7ffa, 0x1311c2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, 0xffffffffffffffff, 0x30, 0x1, @in={0x2, 0x4e24, @private=0xa010101}}}, 0xa0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2403c3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:07 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7fff, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x3f, 0x2, 0x0, 0x0}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)={r5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40008d1) 04:10:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x4, 0x40000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f00000000c0)={0x5, 0x6, 0x9, 0x6, '\x00', 0xff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:07 executing program 2: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0xfff, 0x1, 0x4, 0x31, 0xa7, {0x0, 0x2710}, {0x3, 0x0, 0xa1, 0xa4, 0x9, 0x80, "3778f0e0"}, 0x0, 0x1, @userptr=0x7ff, 0x3, 0x0, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x1ff, 0x3, 0x4, 0x400, 0x3f4a, {}, {0x4, 0x0, 0x40, 0x3f, 0x0, 0x40, "77dd847c"}, 0xbc0, 0x2, @userptr=0xfffffffffffffffc, 0x401, 0x0, r0}) 04:10:07 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 04:10:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x200, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x9}}}, 0x118) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x664, 0xb, 0x101, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0x0, 0x1}, 0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x500000) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x68e, 0x1000, 0x10001}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000280)) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 04:10:08 executing program 2: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0x80000001, 0x9, 0x80000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x8, 0x4c00, 0x800, 0x84000, r0}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x4, 0x0) 04:10:08 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80, 0x80000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@buf={0x61, &(0x7f0000000140)="b599f420346a5a252f62182ba22112409c8485dc9e7cf7415460265182b51bf9a1e09a03b0e3ed107c6b9b02dabe2a68f6c7e404eaa346a241ef461cb7757746244c2ae2d12d3b1e827df5ab77652243eedbe29e3f54680114bf86381a8efe1e5e"}) 04:10:08 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x201}) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) 04:10:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r2}) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, 0x0) 04:10:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x3, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x2cd, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x8000, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f}) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:08 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x5, 0x80007, 0x5, 0x0, 0x0}) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) 04:10:08 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:08 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0xff, 0x5, 0x1f, 0x0, 0x10001, 0xa00, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x400, 0x8001, 0x80, 0x0, 0x83, 0x69a, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) 04:10:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) 04:10:08 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x262700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @ax25={0x3, @null, 0x4}, @isdn={0x22, 0x5b, 0x90, 0x1, 0x6}, @generic={0x22, "367302eedaa579e42bf6a0bf63a9"}, 0x1, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)='ip_vti0\x00', 0x1, 0x7f, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x200, 0x1, 0x2488}) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) syz_open_procfs$userns(r3, &(0x7f00000000c0)='ns/user\x00') ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000080)={0x7, 0x728c39ba443dddfa, 0x7, 0x4, '\x00', 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xa, 0x5, 0x3f, 0x0, 0x0}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:09 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x40, "47f29d", "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"}}, 0x110) 04:10:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r2}) 04:10:09 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x1f, 0x401}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x4, 0x1, 0x4, 0xe000, 0x81000, {r2, r3/1000+60000}, {0x4, 0xc, 0x1, 0x1f, 0xbf, 0x2, "df38d094"}, 0x81, 0x3, @userptr=0x80000001, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x7fffffff, 0x2, 0x4, 0x800, 0x1, {}, {0x1, 0x8, 0x5, 0x8, 0xd4, 0x80, "70835b73"}, 0xffff8000, 0x3, @userptr=0x5, 0x3, 0x0, r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000040)={r1}) 04:10:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r2}) 04:10:09 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {0x0, r2, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0x6}}, 0x18) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x401, 0x541482) 04:10:09 executing program 3: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x200, 0x1000, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffff7, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f00000001c0)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r2}) 04:10:09 executing program 3: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:09 executing program 4: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x103000) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x12100) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r5}) r6 = accept4(r1, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, r7, 0x3b, 0x34, &(0x7f00000001c0)="6efc467dbaf431fbef8c0636749c60c649b2a448b317fac94ecdce6c2a7337609404a0129d66cce100fa22343f19492c216c7c42", 0xac, 0x0, 0x0, 0x401, 0x101, 0x2, 0x75, 'syz0\x00'}) 04:10:09 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x68e1c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x43f, 0x0, 0x0}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r2, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0xa, 0x1}) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000180)={0xf00, 0x10, 0x780, 0x78, 0x7, 0x1, 0x8, 0x2, {0x8, 0x3, 0x1}, {0x9, 0x9, 0x1}, {0xd71, 0x100, 0x1}, {0x80, 0x10000}, 0x4566ab2300e1a50d, 0x100, 0x3ff, 0xffff, 0x0, 0x72b0, 0x8, 0xfffffffd, 0x0, 0x3, 0x3e437720, 0x1, 0x4, 0x303, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$FBIOBLANK(r3, 0x4611, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), r4, 0xffff8eca}}, 0x18) 04:10:09 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x21, 0xa}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x40, 0x400800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xd866, 0x5, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x5, 0x1}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x8850) read$char_usb(r2, &(0x7f0000000100)=""/122, 0x7a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x3f, 0xfffffff9, 0xb62, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000280)={{0x5, 0x3, 0xfffffffc, 0x7, 'syz0\x00', 0x200}, 0x2, 0x3000000f, 0x5, 0x0, 0x7, 0xa44, 'syz1\x00', &(0x7f0000000200)=['/dev/dri/card#\x00', '/dev/dri/card#\x00', '\x00', '{[-{\\\',\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00', '/dev/dri/card#\x00'], 0x54, [], [0x2, 0x0, 0x7, 0x101]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:09 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0xff, 0x80, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @private1, 0x3}}, 0x24) 04:10:09 executing program 3: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:09 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)) 04:10:09 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:10 executing program 5: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:10 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000540)={{0x1, 0x4, 0xf4b, 0x8000, 'syz1\x00', 0x7}, 0x0, [0x4, 0x2, 0x1c, 0x649, 0x8, 0x4, 0xffffffffffff7fff, 0x200, 0x4, 0x93f, 0xa76, 0x9, 0xa1, 0x3, 0x0, 0xfffffffffffffffe, 0x4, 0x5, 0x1, 0x6, 0x2, 0xffffffff, 0x6, 0x2, 0xbc8b, 0x1, 0xa2, 0xe7, 0x6400000000000000, 0x40, 0x1f, 0xfff, 0x10001, 0x3ff, 0x0, 0x10001, 0x2, 0x7, 0x8, 0x400, 0x8, 0xfffffffffffffff8, 0x469c, 0x80000000, 0x8000, 0x2, 0x207b, 0x8dcd, 0x80000001, 0x9, 0x1ff, 0x1000, 0x9, 0x4, 0x3f, 0x3800000000, 0x8, 0x9, 0x1ff, 0x8, 0x5, 0x4, 0x6, 0x4, 0xe4a5, 0x7e2, 0xfffffffffffff800, 0x61fe, 0x2, 0x0, 0x8, 0x7, 0x0, 0x5, 0x1000, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0xfffffffffffffff7, 0xfffffffffffff6b8, 0x3, 0x5, 0x0, 0x5, 0x80, 0x7, 0x7fffffff, 0x8, 0x4, 0x8001, 0x8, 0x5, 0x9, 0x3, 0x3, 0x92f1, 0xfffffffffffff001, 0x0, 0x8000, 0xf5e, 0x0, 0x8, 0x8, 0x400, 0x1000, 0x4, 0x10001, 0x5, 0x3, 0x3ff, 0x65ea, 0x1, 0x5, 0x0, 0x4, 0x140, 0x4, 0x10000000000000, 0x1f, 0xfffffffffffffffd, 0x8001, 0x9, 0x8000, 0x5, 0x0, 0x4, 0x8, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5c, 0x5, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:10 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = getpgrp(0xffffffffffffffff) waitid(0x0, r0, &(0x7f0000000000), 0x4, &(0x7f0000000080)) 04:10:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x0, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:10 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:10 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x1}}, 0x18) 04:10:10 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x5, 0x3f, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000340)={r1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x12a, 0x5}}, 0x20) socketpair(0x6, 0xa, 0x0, &(0x7f00000002c0)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x2, 0x800, "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", 0x7f, 0x0, 0x9, 0x70, 0xc2, 0x1, 0x2, 0xfd}, r7}}, 0x128) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r4, 0x0, 0x2, 0x4}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r4, 0xc, 0x1, @in={0x2, 0x4e20, @empty}}}, 0xa0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000050}, 0x801) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000841) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x4bc, 0x8, &(0x7f0000000000)=[0x8fb, 0x8, 0x0, 0x7ff, 0xf8c3, 0x1, 0x3ff, 0x0], &(0x7f0000000080)=[0x400, 0x5, 0x1bbc, 0x63, 0xe257], &(0x7f00000000c0)=[0x1f, 0xff, 0x6, 0xd64, 0x8, 0x895], &(0x7f0000000100)=[0x4, 0x0, 0x20, 0x0, 0x380, 0x9, 0x3]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:10 executing program 1: r0 = socket(0x15, 0x1, 0xf5a6) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x87, 0x0, 0xffff, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x210102) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000300)={0x8, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x20501) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r7, 0xc01064b3, &(0x7f0000000140)={r2}) 04:10:10 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:10 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xd9, 0x0) 04:10:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x40, 0x42b1, "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", 0x20, 0x81, 0x7f, 0x0, 0x80, 0x0, 0x6}}}, 0x120) 04:10:10 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x40, 0x4, 0x6, 0x0, 0x0}) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) prctl$PR_GET_THP_DISABLE(0x2a) 04:10:10 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x260800) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) 04:10:10 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:11 executing program 0: syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x80001}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x1}}, 0x18) 04:10:11 executing program 4: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={@none, 0x9, 0x9, 0xd864, 0x101, 0x7f, "313a84bb8ebb249e32f691641f5f5e603c5e6ceb599892731705d4a535e2f39d3b10275f2b1745ba417f41d6ddcef9f3c7af9bc31b37fe86b1be7757de0e6656180cc389d1ca651187e54a31b70f0a30b06ff9a9e5f7d259ed93674151b9d61315b95073582bbd0934a9aa10e96a47d34c0ad286e63d13e54704dd95f63bb2ca"}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:10:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x0, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:11 executing program 2: setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='/dev/dri/card#\x00', 0xf) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x880) 04:10:11 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x20, 0x6, 0x6, 0x7, 0x0, 0x7fff, 0x4304, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x4010, 0x72571e25, 0x3, 0x0, 0x9, 0x4, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='/dev/dri/card#\x00') 04:10:11 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:11 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x40004, 0x8000, 0x2}) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000140)={0x24}) 04:10:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x4, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000000c0)={r1}) 04:10:11 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2ce00) 04:10:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x2000, 0x0) write$fb(r0, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040)) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:11 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x1}}, 0x18) 04:10:11 executing program 1: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:11 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x10, 0xffffffffffffffff, 0xf000) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7f, 0x1, 0x7ff}) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2, 0xd, 0xd8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000140)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x3, 0x800001c, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x7ffc, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="0000cab5347b00000000009a0bf2baf8000000000086aee5e74f127c13a3ca68f45bfa9202acf81abfdd0d05cc2c2d7e87c0ff62f9a0f24a94b12cd8e25c41132ce5d46747d261e2e9f80056825e21aac04fd440e422d2af4418e12fea387d14c10aa92a6ca1bdd3d331dc71a08dfc53c1b0f958666447a199ca0e9ddcd1fc0bf54fd44b93d40eeed8b40ff116cbb1791541898dee8a35f35162aca20d0846780fa54f7d225849ac8c0fb9d77392ac797e40bc8a70bc97ac9971b3847097ab4e579e440cb22202aeb5c5ae6fa8d2c07f8013a904fa23f024"]) 04:10:11 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:11 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10}, 0x18) 04:10:11 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x4000000000, 0x2ca00) 04:10:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:12 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x12, 0x800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8020, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = socket(0xb, 0x6, 0x3ff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4c090) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f00000000c0)) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000240)={0x8, 0x1f, 0xf8c, 0x4000}) 04:10:12 executing program 1: write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, 0x6c8}}, 0x18) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x400100) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000001c0)=0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:12 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:12 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x6, 0x0, 0xfa, 0x11, 0x0, 0x3f, 0x200, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x402, 0x1, 0x7ffc, 0x6, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 04:10:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x1}}, 0x18) 04:10:12 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x400000000001, 0x20e00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0xffffffff9b6160be, 0x761341) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80, 0x0) r4 = socket$inet(0x2, 0x800, 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000380)={0xffffffffffffffff, r4, 0x6, 0xaf, &(0x7f00000001c0)="af7e5d2cd281e88af42b14a57db8913ba0ef837e7b0ea88153f516f7aa17f4cb09ca7f87531a99800ca9a230d9e078616b7db7e917bef2f24095767737021b95b0bd3c8664b31d5047c99ba5559b8b1f5b3bf9bbd3695958b450f1090cba668b83c9e0b2ce2842628883d02aabce855752bdff22ec98836f2d7de2c5e1607abefcd03bb4b8953926b7b75aed00701260024b1bc0c6f5bc147538a2b627e46aac8c0d9a2848d28c1d0c793fbd2cad25", 0x16, 0x40, 0x1, 0x4, 0x921, 0x0, 0x7f, 'syz0\x00'}) 04:10:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x445, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) 04:10:12 executing program 3: setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000000)='/dev/dri/card#\x00', 0xf) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7, 0x400) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x880) 04:10:12 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0xaca00) 04:10:12 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xd8f2, 0x600141) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 04:10:12 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r5, 0x1}}, 0x18) 04:10:12 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xb2, 0xa4400) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400, 0xfffffe00, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:12 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x400000, 0x0) write$fb(r3, &(0x7f0000000100)="764faa3ae89cb57de9f3055f033c3bfd7b4a23147a975d86e3d2788e212b92d7b8837a786fc5d699c7c4b0792cfaf7fa355b53ee75efb6aab882dffeb58458bca9b696445d151055cff5da400d7644a061652e7b80123d48774f4272a69129eef97dbf9eb26c26b927f02c9fc8eefb46e471fc9d89d7ae77473a13b3e11f07e7b0ecf546314a8cfd5210381228eff1fcfe19db5fb1c30d26428bc7c7e51275562cbe62a5ab2ebda9f38ac8f0254444b5b3d2fe212d25fb7cadd2bbdf09068d0296318e", 0xc3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:12 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81d, 0x200000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:13 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x80000000, 0x404180) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x80040) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) 04:10:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x400, 0x7f, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000080)={@any, 0x1, 0x7fff, 0x2, 0x0, 0x4, "fc31022a6cb46c14bde9e49b8013fb0069c73767e9c38b6d0db420521e362ae49b87b6a984143658288dafcc3b46b8d54b0a0e111e023791babf80dec135cef029d19c829775e1e65144479c473f61cd377b4b49b87393d1dc7cf924809a22b89b5fb57799425a43b4f0863e4df57fa01a609a84bb8b2af944ce35ae4efdb935"}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x40) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x8, 0x2d9, 0x1}) 04:10:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0xa0042) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x20000000000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2, 0x143842) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f00000001c0)={0xb95e, 0xffffffff, 0x401}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r6}) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r8, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250700000005002e000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="fdff3400fc000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) 04:10:13 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x2c200) 04:10:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000040)={r1}) 04:10:13 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x81, 0x1000, &(0x7f0000000540)="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", 0x27, 0x0, 0x2, 0x4, 0x200, 0x1, 0x6, 'syz1\x00'}) 04:10:13 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:13 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x24) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="b3f7e4e3b766"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x80801) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x7f, 0xe80eb603, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000001c0)={0x40, 0x1000, 0x40, 0x2000, 0x8, 0xffff, 0x8, 0x2, {0x7, 0x1}, {0x100, 0xcbf, 0x1}, {0x7fff, 0x9}, {0x3, 0x3ff}, 0x2, 0x1d203ae4ae35a6c0, 0x7ff, 0x1, 0x1, 0x43bed597, 0x10000, 0xf9, 0x7, 0x8, 0x80000001, 0x80, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:13 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:13 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet(0x2, 0x6, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x9, 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x9, 0xfffffffb, 0x3ff}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x7, 0x5, 0x0, 0x84800}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:13 executing program 3: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:13 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000140)={0x3c}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x1, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x80001) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:13 executing program 5: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f00000003c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:13 executing program 1: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f00000000c0)) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x7, 0xfffffffd, 0x3e, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffd, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x984) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)={r1}) 04:10:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket(0xf, 0x80000, 0xd90a) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:14 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000000)={0x4, 0x5, 0x7901, 0xf482, 'syz0\x00', 0x1ff}) 04:10:14 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x400000) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) 04:10:14 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) 04:10:14 executing program 0: accept4(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x80800) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:14 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x0, 0x7}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1000, 0x111801) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:14 executing program 5 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:14 executing program 3 (fault-call:5 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x200, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7, 0x2cb00) 04:10:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x580) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3) 04:10:14 executing program 3: r0 = gettid() sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) getpgid(r0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x400000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:10:14 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2bb, 0x1c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:14 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) 04:10:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000003, 0x26342) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x10000, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000080)={0x3f}) 04:10:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x5418c2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@null=' \x00', 0x7, 'team_slave_0\x00'}) socketpair(0x0, 0x800, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x34, {0xa, 0x4e21, 0x1, @local, 0x400}}, 0x24) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000300)=[0x4], 0x2) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0xa2f, 0x16, 0x83c}) 04:10:15 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}, 0x24) connect$rxrpc(r0, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, [], 0x1}, 0xfffffffd}}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:15 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x2ca00) 04:10:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x6, 0x1, 0x4}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r7}) 04:10:15 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x40, 0x3}) 04:10:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f00000000c0)='\x00', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8002, 0x100001, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5421, 0x4c000) 04:10:15 executing program 2: r0 = socket(0x26, 0x5, 0x0) accept4$x25(r0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r1, r2, 0xc187, 0x6f, &(0x7f0000000100)="8542f44c69330cb359045d5ca90aae19f0f1f8fe9c2adb0d5984974278245a21244d779d3c19aa3617d941945fe9225c05bd17d95516be45c683003273d773d2da17577266479ad7ca1a3fca3530a6ca0f03070bf3d29fcaf927a1a79feedb2bdd0fcc5156155dcf086aea78d4a5ad", 0x5, 0x1e, 0x0, 0x8, 0x7ff, 0x3, 0x1f, 'syz0\x00'}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x72b7, 0x0, {"c789377859d1fcd0a070a298c3958fea"}, 0x7, 0x81, 0x2}}}, 0xa0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r3 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x52ea, 0x381301) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000280)={0x4, 0x3, 0x0, 0x2, 'syz1\x00', 0x8}) 04:10:15 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2000000000000000, 0xa9580) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x200000005, 0x42a00) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000100)=0xf1) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) 04:10:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={@null=' \x00', 0xd, 'netdevsim0\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xd, 0x2001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:15 executing program 2: setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/159, 0x9f, 0xe1, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) sendto$rxrpc(r0, &(0x7f0000000100)="dee08fdce22e50e252e64d8bac2de145b17f79fa215f12561334e8750ddace518c256f15d4e33924c7fd6582fafef1d3ce85ae99bb0081d52219c168496cbae83f1c89272d33fce72ea3a882cc0b065ec5a8eead53cd67c8c24e3c48494bdb275568a06aa3fa1c9ade216f7de8f67d6525a3ee3776f0f6f6c70abc6b2536e06360f86c93772671e14c323631b0ce640637c5c6efcc83fe1c4c1578904b9414d11ec21a472cd60a999cbd7c02218d1745a27651d0f211c61dea7a26f7a86b61265c99e9f308bd23bf5870b379c14ede7a06a672560551c8bd6c381d9f7d0f154046fb1f9009e628346cb6", 0xea, 0x50, &(0x7f0000000200)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @rand_addr=0x64010101}}, 0x24) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2000, @loopback, 0x7fff}, @in6={0xa, 0x4e22, 0xa1, @loopback, 0x4}}}, 0x118) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:15 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='/dev/dri/card#\x00', 0xf) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000040)={@none, 0x7}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xc1, 0xfffffff9, 0x10000, "d82d2a5c7af0ab73041d5bcb6046988e11e1799204c0f27699df3ec75680476ff7d1711f94c65a223c3f04f510c335e3da7a96f9fe24da2535b447ceae84e09ad4fb3ea19808f5aa9b16be44e58df714f9c4e805962f5d43d465a7570176413576f04d0d819b97d36c0f59d66f4468a12b7b56901a7ecd83b49c0d3a307e3f918d5dbe5ed7ea8fdb2d7ff9eb81cd647dd468ea4cc3a2fd08ec60ac952ceb4f1d16ee41b8871cd264770d6d9ab359ad72897fe44da45a5448c7d113dc86b4f44728"}) 04:10:15 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x400001f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x4f1b9af5, 0x4, 0x1000, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x5, 0xb560, 0xffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)) 04:10:15 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xc6dd, 0x1b, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:15 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:15 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xf3, 0xc00) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:15 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)={r4}) 04:10:15 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, &(0x7f0000000140)=0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:16 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xe5d, 0x40a543) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1ff, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000003c0)=""/227, 0xe3, 0x41, &(0x7f0000000080)=@in6={0x21, 0x200, 0x2, 0x1c, {0xa, 0x4e24, 0xe71, @dev={0xfe, 0x80, [], 0x3a}, 0x101}}, 0x24) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x2, 0x8000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0), 0x13f, 0x6}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x5, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r6}) r7 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x81, 0x111000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40405515, &(0x7f00000004c0)={0x3, 0x2, 0x6, 0x81, 'syz1\x00', 0x1000}) 04:10:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) accept4(r3, &(0x7f0000000080)=@nl, &(0x7f0000000100)=0x80, 0x80000) 04:10:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r1, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x402, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xc04c010}, 0xc000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe5b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000020}, 0x24008040) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffffffffff, 0x102) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x9, 0x200) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000140)={{0x8, 0x4, 0x1, 0x0, '\x00', 0x4}, 0x1, [0x1, 0xffffffffffff966d, 0x7fff, 0x6, 0x80000001, 0x3, 0xffff, 0x6, 0x35, 0x3, 0x40, 0x3f, 0x8, 0x3, 0x9, 0x4, 0xfffffffffffff1ed, 0x6, 0x4, 0x2, 0x5, 0x0, 0x9, 0x0, 0x3, 0x785, 0x1f, 0x8000000000000, 0x80000000, 0x9, 0x3, 0x0, 0x0, 0x82, 0x3, 0x0, 0xb53e, 0x2, 0x401, 0x9, 0x2, 0x2, 0x4, 0x2, 0x0, 0x0, 0x86, 0x1b29, 0x200, 0x9, 0x200, 0x200, 0x3ff, 0x3f, 0x4, 0x200, 0x81, 0x7fff, 0x3ff, 0x35, 0xddf, 0xfdfc, 0x5cad, 0x6, 0xfffffffffffff800, 0x9, 0x200000000000000, 0x63, 0x100, 0x400000000, 0x8000, 0x9, 0x32ec, 0xb6, 0x8001, 0xa5ea, 0x7f, 0x9, 0x3f, 0xb15, 0x5, 0x8, 0x8, 0x3, 0x3, 0xffffffff, 0x2, 0xfff, 0x80000001, 0x0, 0x9, 0x4, 0x800, 0x7f, 0x4, 0x6, 0x4, 0x7, 0x5, 0x4, 0x70bd8333, 0x4, 0x100000001, 0xcd, 0x8, 0x7fff, 0x0, 0xb1, 0xfffffffffffffffd, 0x1, 0x8001, 0x0, 0x0, 0x3, 0x4, 0x4083b3ce, 0x3, 0x4683159c, 0xffffffff, 0x3ff, 0x0, 0x0, 0x101, 0x7, 0x0, 0x8, 0x97, 0xfffffffffffffff7]}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3ff, 0x10000) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000e80)={{0x4, 0x1, 0x101, 0x7ff, 'syz0\x00', 0x8005}, 0x4, 0x3, 0x9, r3, 0x1, 0x400, 'syz0\x00', &(0x7f0000000e40)=['\x00'], 0x1, [], [0x9, 0x101, 0x8, 0x3]}) r4 = syz_open_dev$sg(&(0x7f0000000dc0)='/dev/sg#\x00', 0x6, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000e00)) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000640)=0xe8) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000bc0)=0x9) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000100)=0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000680)='/dev/snd/controlC#\x00', 0x7, 0x2200) r6 = syz_open_dev$sg(&(0x7f0000000d40)='/dev/sg#\x00', 0x20, 0x0) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000d80)=0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000006c0)={{0x4, 0x4, 0xf1, 0x7, 'syz1\x00', 0x8}, 0x0, [0x4, 0xfffffffffffffffd, 0x8, 0xfa3, 0x101, 0x4, 0x825c, 0x5, 0x52e32482, 0x8000, 0x6, 0x9, 0x8000, 0xff, 0x1ff, 0x1, 0x7, 0x8001, 0x7, 0x1, 0x8, 0x5, 0x1, 0x4c, 0x6, 0x279a, 0x4, 0xf60, 0x7f, 0x2, 0x5, 0x93, 0x3, 0x5, 0x8000, 0x1, 0xff, 0xffc, 0x4, 0x8001, 0x30, 0xfc, 0x22b, 0x6, 0x6, 0x81, 0x1ff, 0x800, 0x20, 0x5, 0x6, 0xff, 0xff, 0x100000001, 0x70d, 0x2, 0x714, 0x7ff, 0x100000000, 0x404, 0x3, 0x80, 0x10000, 0x678a, 0x10000, 0x400000, 0x401, 0x7, 0x7, 0x3, 0x9, 0x1, 0x678, 0x0, 0x1, 0x9, 0x1000, 0x5, 0x3, 0x5, 0x400, 0x9, 0x7, 0x401, 0x4, 0x0, 0x8, 0x7, 0x7fffffff, 0xdc36, 0xffffffff, 0x1, 0x5, 0x5, 0x0, 0x2, 0x2, 0x8, 0x3, 0xd, 0x5, 0x8, 0xfffffffffffffff8, 0x7ff, 0x4378633a, 0x256e, 0x10000, 0x100, 0x800, 0x8001, 0x7, 0x6, 0x1000, 0x5, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x6, 0x7f, 0x9, 0x2, 0x8, 0x1dd0, 0x6, 0x1b, 0x6, 0x5daf0ba6]}) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000c00)={0x6, 0x7f4cc7f5, 0x1}) 04:10:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000000)={r5}) 04:10:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6da, 0x1f, 0x20006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x10000000000000, 0x8100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) 04:10:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40007, 0x30000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) read$fb(0xffffffffffffffff, &(0x7f00000000c0)=""/57, 0x39) 04:10:16 executing program 1: syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000140)=[0x4], 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 04:10:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x400c40) 04:10:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'macvlan0\x00', @ifru_names}}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x88000, 0x1, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) 04:10:16 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000300)={0x5, 0x3, 0x0, 0xfff, 'syz1\x00', 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0xe0042) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x200, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000000c0)={r6}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0x1, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x6}, 0x8) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000200)}}, 0x18) 04:10:16 executing program 2: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x640, 0x384, 0x3c0, 0x280, 0xf1, 0x8, 0x1, 0x2, {0x1, 0x4}, {0xe5, 0x0, 0x1}, {0x8, 0xca55}, {0x6, 0x1ff, 0x1}, 0x3, 0x100, 0x5, 0x4, 0x0, 0xa06a, 0x10001, 0x8, 0x6, 0x9, 0xffffffff, 0x4, 0x1e, 0x200, 0x0, 0x5}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 04:10:16 executing program 5: r0 = socket(0x26, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000400)={0x73e2, 0x24, [0xf5, 0x7d1, 0x7f, 0x1, 0x7fffffff, 0x1, 0x20, 0xfffffc76, 0x800]}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x1801762805cf67ca) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x10b000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x7ffa, 0x40007a, 0xfffffffe}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:16 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x200) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0xa0000000000000, 0x200) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffffffff, 0x1a3000) 04:10:17 executing program 3: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xbb, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r0}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x400, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000001c0)={r2}) r4 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x67, 0x4, 0x2, 0x0, 0x6, 0x1008, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7c6a, 0x0, @perf_config_ext={0x400, 0x3f}, 0x100, 0x5, 0x5, 0x3, 0x4, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000000c0)) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000080)={0x190, 0x80, 0x3c0, 0x78, 0xcae0, 0x3, 0x20, 0x2, {0x3f, 0x1}, {0x6, 0x8, 0x1}, {0x1, 0x6}, {0x9, 0x2, 0x1}, 0x2, 0x1, 0x800, 0x9, 0x1, 0x9, 0x2, 0x10000, 0x2, 0x1c00, 0x1, 0xaec9, 0x1, 0x200, 0x0, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = accept4(r0, &(0x7f0000000640)=@in={0x2, 0x0, @broadcast}, &(0x7f00000006c0)=0x80, 0x100800) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000700)) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) r7 = socket(0x26, 0x5, 0x0) accept4$x25(r7, 0x0, 0x0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000740)={r6, r8, 0x800, 0xd5, &(0x7f0000000540)="1f2fd9f43ca280b74ca04e377f0459295ff612021542c8959e9b9fc18e1f249d1459bf96b225b638f46f28c1dc965d5a610357bc1f986018568ecb9787d158785717e9b2289cec8d485225a5f4b3a1157275a733834dd4cb83a6d5dcffceb76029659d7fe139f0d4901b96fe875730b3f9d6326a64f2b6a2af1cbd411d78689fa250ae2d6d2eeb57dd22fad1acd21f84285a3d57f8a66d16f9e6b313016a8eb2755a2699f6bd608473c14bc44d6bea474bbe6b693a4638ed5c87ecf3e4761fe78d1da92ca712eaad37a5ea8c0bee1e4bf9f86b0a23", 0xfe, 0x3, 0x486, 0x5, 0x200, 0x3, 0xff, 'syz1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x3, "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", 0x8, 0x4, 0xdc, 0x3, 0x7, 0x8, 0x8, 0x1}, r4}}, 0x128) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:17 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000003700)=""/102395, 0x18ffb}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/26, 0x1a}, {&(0x7f0000000080)=""/8, 0x8}], 0x4, &(0x7f000001e700)=""/4096, 0x1000}, 0x102) recvmsg$can_bcm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/251, 0xfb}, {&(0x7f000001c700)=""/4096, 0x1000}, {&(0x7f0000001240)=""/61, 0x3d}, {&(0x7f0000001280)=""/93, 0x5d}], 0x6, &(0x7f000001d700)=""/4096, 0x1000}, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001500)={'batadv_slave_1\x00'}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x906, 0x101040) socketpair(0x23, 0x800, 0x5, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$x25(r0, &(0x7f00000014c0)={0x9, @remote}, &(0x7f00000029c0)=0x12, 0x80000) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = syz_open_dev$sg(&(0x7f00000013c0)='/dev/sg#\x00', 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000001400)) r5 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000001440)='/dev/sg#\x00', 0xf7, 0x103003) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000001480)) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000002780)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002740)={&(0x7f0000002c40)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYBLOB="040027bd7000fddbdf250908000005002e0000000000059aefa9e1000000050030000100000008003c000500000008003400001000d405002d00000000000fddfae130ecb68fdf96b2943ff17fe92be1b8b465efaf0345d7c84070a86b0c982e42615a8c02c1df142b00170bd19dc4af1ad35715840d56ad7689e574b9bd5629a5702b0c349b0c201e2b5adf7d1e79c27314c772140e1dfcd670fb6bb8448f82511a451efafa30929cbc3a0612073981a1fc3d11ffb28c38dfb33351e7cd95818ca9ebf50e81e84750670dca9ab76d4277ce8b64f8e2538b6327aa6d2afe969d063008fbe52f1c04b6aeb85c5489a0ee743ac8d2518487d1c7a7277f6d8045b95877d6e7c3bd1c456130aca08c822291934f62c45c35c8a30705bacde0cb1d9abd3df81af445c34a649094bde606457a495f733dbd8796deddd72e96d1d95a69ad937ea63f2780a0659bfd526579fe1034376f7b877c2d9405be2fec714f9cefb1b0a245741f3b3c7989c43d34ce2c6f6853293f9d3210480446e91235d46c6fcd2e64c8422fbfcb480533f7ff87567d72dba455af74059268f54906590c037907bdd900f43bd6a784f3b1ae6a8a1edaba15cd931666ca43691e6e1d6d12b746ee04ff30062a3dc019dc1ffa250fa3f5a32a129a"], 0x44}, 0x1, 0x0, 0x0, 0xc5}, 0x1001) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000002840)={0x7, 0xa, &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)}) [ 3581.130918] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3581.170856] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 04:10:17 executing program 4: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000000c0)={0x30, 0xf0, 0x550, 0x10, 0xc1, 0xc37a, 0x20, 0x1, {0x7, 0x2}, {0x211, 0x8000, 0x1}, {0x1, 0x1, 0x1}, {0x2, 0x720, 0x1}, 0x6, 0x0, 0x8, 0xfff, 0x0, 0x9, 0x7, 0x100, 0xe2, 0xe5, 0xfffffffc, 0x0, 0x10, 0x4, 0x0, 0x5}) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x9, 0xb, 0x80000001}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xa) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x1, 0x0, 0x7, 0x5f, 0x0, 0x4, 0xa8086, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x8011, 0x6, 0x4, 0x5, 0x3ff, 0x11e7, 0x401}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x401f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x28140) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000000c0)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x5, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xffffffff, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r6}) 04:10:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) [ 3581.214879] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3581.240231] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7f, 0x94e01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4000000d, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) socketpair(0x11, 0x800, 0x92f, &(0x7f0000000000)) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x800, 0x4001c1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000140)={0x7, 0x4, 0x7, 0x4, 'syz1\x00', 0x1}) 04:10:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x8, 0x40000) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000200)}}, 0x10) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x21c000) 04:10:17 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x7, 0x9, 0x80, 0x1, 0x0, 0x0, 0x20004, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x1000, 0x7, 0x2, 0x9, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000100)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7, 0x0, 0x3c, 0x0, 0x0}) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r4 = gettid() r5 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x5, 0x5b9000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6, 0xffff0000, 0x0, 0x0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000004c0)={0x2, &(0x7f0000000340)=[{}, {}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000300)={r6}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000140)={{0x4, 0x5, 0x9b04, 0x7, 'syz1\x00', 0x1}, 0x5, 0x10000000, 0x40, r4, 0x1, 0x6, 'syz0\x00', &(0x7f0000000100)=[':\\\x86\x00'], 0x4, [], [0x5, 0x75, 0x9, 0x2]}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000000c0)=[0x3, 0x4], 0x2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x100}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f00000000c0), r5, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x4000001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7f, 0x480000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x14d9, 0x100) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x2040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x80000000, 0xffffffff, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, [], 0x1}, 0x5}}, 0x24) 04:10:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x81, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000080)) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:17 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x9, 0x2ca00) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000340)={0x6, 0x42, 0x3dcb}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000540)={0x8, 0x20, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000580)={r3}) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0xda, 0x3c51c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x4, 0x4, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000004c0)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfff, 0x6000) r6 = syz_open_dev$dri(&(0x7f0000000600)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000440)={0x8000, 0x0, &(0x7f0000000600), &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0]}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 04:10:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x3, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10}, 0x18) alarm(0xffffffff) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x32b1, 0x1}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f00000000c0)) alarm(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 3: setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080)={0x6a}, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x9, 0xc280) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000002c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x100000000, 0x416647) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x40000) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7a}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}}, 0x880) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x40, 0x40, 0x6, 0x0, 0x6, 0x62c78c08265daa96, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x7, 0x4}, 0x18, 0x9bc, 0x10001, 0x0, 0x2, 0xcb, 0x3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r9, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r8}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000540)={0x6, 0x118, 0xfa00, {{0x3f, 0x1, "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", 0x7, 0x4, 0x1, 0x3, 0x12, 0x7, 0x3f, 0x1}, r8}}, 0x120) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000140)={0xffffffffffffffff}, 0x3, r4, 0x30, 0x1, @ib={0x1b, 0x0, 0x80000001, {"a3ecdcbfc31d1d146254881b62ebd7c3"}, 0x8, 0x6}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r10}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x8000000000104, 0x46cf02) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000003c0)) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7fffffff, 0x6a4240) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000008c0)={0x7, 0x8}, 0x10) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000280)) r5 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000080)=0x5) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) r6 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f00000005c0)) set_thread_area(&(0x7f0000000300)={0x1, 0xffffffffffffffff, 0x400, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000100)) 04:10:17 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x329b00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x200, 0x70bd2a, 0x400, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 04:10:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x3f, 0x63, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) getsockname(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000340)=0x80) r3 = accept4(r2, &(0x7f0000000600)=@ethernet={0x0, @multicast}, &(0x7f0000000680)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0xffffffffffffff66, r1, 0x10, 0x870bd27, 0x25d7dbfb}, 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000d5) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x40, 0x300, 0x780, 0x2000, 0xffffddc6, 0x2, 0xf, 0x0, {0x1, 0x1f, 0x1}, {0x3, 0x30e1, 0x1}, {0x9, 0x6, 0x1}, {0x4, 0x7f}, 0x1, 0x2, 0x1, 0x6, 0x0, 0x0, 0x2, 0x8, 0x1, 0x7, 0x8001, 0x345f, 0x30, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x414400) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x400, 0x202000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x4, 0x6, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) 04:10:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xe7ae, 0x151c80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:17 executing program 2: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/66) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xffffffffffffffbf, 0x408000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000000)={0x9, 0x10, [0x4000020, 0x4, 0x7fff, 0x81]}) 04:10:17 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x5, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x105000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0xa000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) 04:10:17 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) gettid() ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000000)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x1, 0xb, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r3}) 04:10:17 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xbf, 0x22a102) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:17 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1f000000000, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:17 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000140)=""/211) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2000000000006, 0x15702) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x5, 0x42) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xe2, 0x3ff, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x7c1) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, 0x0, 0x71859f84cb03244e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x56, 0xff, 0x2}) 04:10:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf25100000000800000008000600", @ANYRES32=r2, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r5 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r5, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @mcast1, 0x3}}, 0x24) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) 04:10:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x2, 0x10200) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0xfffffbff, 0x0, 0x0, 0x0, @ib={0x1b, 0x8001, 0x5, {"100d1f1e0811fc01ca6d7e66e87e4ed1"}, 0x4bb, 0x1, 0x4}, @ib={0x1b, 0x7, 0x0, {"3cb6c60666162240f7992d285e573051"}, 0xfffffffffffffff8, 0x1, 0xc8a}}}, 0x118) 04:10:18 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x98}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5a025e37}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) 04:10:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x8200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r2, &(0x7f0000000080)=""/186, 0xba, 0x0, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x4f, @ipv4={[], [], @empty}, 0x3}}, 0x24) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000d40), 0x80000) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000d80)={0x7f, [0x4, 0x4]}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 04:10:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) 04:10:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x210800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xc6d6, 0x22, 0x101, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x1d9181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0xab3, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r8}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) 04:10:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0xce8, 0xe2e6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000040)=@buf={0x3f, &(0x7f0000000000)="185302753e49290a4e78f1194035ab83144fcb501395696fd4e7094cf9de4988a8e8b447a077371a6dc82fdf0e082760696ec883bb3eb0754c4aa13e8f009d"}) 04:10:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x40000) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x2, 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000140)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x1c9502) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000000c0)) 04:10:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x2f, 0x1000, 0x8}) 04:10:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:18 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r2, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xabdf}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd7ba}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000014}, 0x40) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="04000000", @ANYRES16=r0, @ANYBLOB="040027bd7000fedbdf2511000000050037000000000008000b00000800000600280000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) 04:10:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0x81, 0x1}) 04:10:18 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x57, 0x4800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000080)=0x9) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:18 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x3, 0x4, 0x9}) 04:10:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x654840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4b, 0x9000) 04:10:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x32}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x100003f, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e20, 0x132b, @private2={0xfc, 0x2, [], 0x1}, 0x2}}}, 0x38) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r2}) 04:10:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2000000000, 0x85a580) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfff, 0x2000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x4, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000080)={0x1, 0x10}, 0x18) 04:10:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x6, 0x400481) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x3, 0x7976, 0x51f, 0x180, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x6, 0x2, 0x1f, 0x100, r3, 0xf50, [], 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x40) 04:10:19 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x2ca00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x8, 0x7, 0x40}) 04:10:19 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x10000) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x81, 0x46203) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/239) socket$can_raw(0x1d, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:19 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={@any, 0xffffffff, 0x80, 0x58, 0x8791, 0xfe01, "4bc9247a99298ee1213c72d7cc008691e22168f6295401e92feafb9c3506efe3a2e2f20d24e656c12109643fd02165fcf30e0e677b8f90db3ff2e9c3311fde9bee42f1f066b0f90503685335c05f728601759516ca8e0d20778a1ac9ebb9e84db8b37132335012486c28b7427bbccf6068205a2816345d001f8cd9aea0b38d3a"}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f00000000c0)={0x33}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000040)={0x10, 0xfffffeda, 0xfa00, {&(0x7f0000000000), 0x4, {0xa, 0x4e24, 0xb, @empty, 0x3f}}}, 0x38) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r3, &(0x7f0000000240)="27279533810d753f2373a0e07a21417b28b22143adef5ae4df9a67502458fbc2d3adf271c604e738a75069e3d4e05806ca24f9b5a1302773535912887e96d813e9dc067f5aefb59bfba79d525c2c6b05788a", 0x52, 0x48000, &(0x7f00000002c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x24) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xacc, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x800, 0x80000001, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000100)={r5}) 04:10:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 04:10:19 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000240)={0x3f}, 0x1) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) accept4(r0, &(0x7f0000000040)=@ll, &(0x7f00000000c0)=0x80, 0x800) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8fef, 0x1c5100) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x103000) r5 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x5, 0x10300) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000100)={r3}) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r7}) 04:10:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r2, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x1, 0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x9, 0xa, 0x4, 0x40, 0x9, {}, {0x0, 0x8, 0x3, 0x7, 0x5, 0x8, "6db0a513"}, 0x100, 0x3, @userptr=0x8, 0x400, 0x0, r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) 04:10:19 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x81, 0x102) 04:10:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8000, 0x1, 0x2000000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) 04:10:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) socketpair(0xa, 0x1, 0x6, &(0x7f0000003180)={0xffffffffffffffff}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f00000031c0)=[0x2], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000040)=[0x3, 0x4], 0x2) 04:10:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4903) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x20001, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:19 executing program 1: accept4(0xffffffffffffffff, &(0x7f0000000100)=@ieee802154, &(0x7f0000000040)=0x80, 0xc00) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x40, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) 04:10:19 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x3, 0x41}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x8000, 0x7fff, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 04:10:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x81, 0x3210c0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x2d, 0x0, [0x5, 0x4, 0x200, 0x3, 0x81, 0xfff, 0x800, 0x1, 0x4, 0x9, 0x9, 0xa5, 0x6, 0x7, 0x1000, 0x5]}, {0x2a, 0x0, [0x6, 0xaa, 0xff00, 0xbca, 0xf4, 0x5, 0x7fffffff, 0x2, 0x2, 0x3f, 0x1000, 0xce, 0x101, 0x0, 0x830c, 0xfffffcd6]}, {0x17, 0x0, [0x400, 0x87c, 0x1, 0x1ff, 0xee1, 0x36, 0x8a15, 0x0, 0x6, 0x3, 0x0, 0x40, 0x3, 0x1ff, 0x0, 0x200]}, {0x6, 0x0, [0x8001, 0x4, 0xf740, 0x8, 0x5, 0xfffffffa, 0x7, 0x8, 0x2, 0xfffffffb, 0x7fff, 0x5, 0xffff8000, 0x1, 0xfc, 0x7ff]}, {0x1, 0x0, [0x8000, 0x0, 0xffffffff, 0x8, 0x31, 0xff, 0x9c, 0x2, 0x5, 0x7fff, 0x40, 0x8, 0x4, 0x80000000, 0x9, 0xe79]}], 0xffffffffffffffff, 0x1, 0x1, 0x168}}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:20 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x400100) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)) 04:10:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x2400) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "92107a", 0x6, 0x5}) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="7d0000005d0c0000030000000cd77f1eded37c29e0cb2b4a562e2491af80053f7db5ce9c15ccef5bd8b8416082490dd3d14011830ffc05283633c7026f5dbc8fb1faa5be3804a8cfb8037d0c9853ad73c01bcb0cc727a8a3d80d4f43cc42545fd0ee3d8d44e213b2d8d6e9b3944c15c5e6fb194241ee633d7f83d13a77e1aeaabe80a7514b6dd14c741ef6fb12e2e0f7"]) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:20 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r1}) 04:10:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x92, 0x8000) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000000c0)=0x8000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x117042) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x3000003, 0x100010, 0xffffffffffffffff, 0x76) 04:10:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x5, 0x200ce7f7, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xfffffffb, 0x20000062, 0x8352, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000300), r2, 0x2}}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0x2, 0xfffffffd, "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", 0x1, 0x1, 0xff, 0x95, 0x70, 0x0, 0x1, 0x1}}}, 0x120) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r4}) 04:10:20 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 04:10:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x1ff}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x88000, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000100)={0x556, 0x280, 0x1780, 0x10, 0x200, 0x2d9aa574, 0x18, 0x7fffffff, {0x7b31a8b1, 0x1, 0x1}, {0x7, 0x2}, {0x2d30, 0x1, 0x1}, {0x0, 0x5, 0x1}, 0x3, 0x10, 0x100, 0x6, 0x1, 0x20, 0x3, 0x4, 0x9, 0x1, 0xffff, 0x2, 0x10, 0x100, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) 04:10:20 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000540)=""/4096) 04:10:20 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0x2}, 0x6) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vim2m\x00', 0x2, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f00000000c0)=0x80, 0x80800) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000140)={0x7, 0x0, 0x4, 0x8, 0x3ff, {}, {0x2, 0x2, 0x9, 0x32, 0x1, 0x1, "f487cf54"}, 0x1, 0x2, @fd, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) 04:10:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x73f500) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) 04:10:20 executing program 4: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:20 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1000000000, 0x2ca00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xa89, 0x0, 0x80000000, 0x0, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="cb0000006c00000001000000e0318d908eef72800e2e8cb8ee502254069f3f2fca9b5dbaec031a6e3dc6a15f1d6c0b704a18c6f19c52c114a1461c4c9d183ba12d69c5fc8006a8f12f18528b2f72268d6f30f1c053b299482f5a2cfbfda44385e81534f5d959ddce75204086307f5f7f9cb02e427cc64aaad5c653ec741d1388b899dbdda3f78ea673cada96bcd8bd145a2e9844700f67bb939ccc9c1b16d5bac7f137897fafc1edfda27033fe3dc1e1317fd7dd59db3592482c95d98aa5c25f254ba2c66da6ca969c10a6f348bfaf9ee5b914650df433"]) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000180)) 04:10:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x220001) 04:10:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000080)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000040)) 04:10:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x800, 0x1, {0x77359400}, {0x5, 0x8, 0x8, 0x8, 0x8, 0x7f, "74bfa964"}, 0x2, 0x1, @offset=0x200, 0x4, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0xfcb5, 0xb, 0x4, 0x8, 0xfffffff9, {0x0, 0xea60}, {0x2, 0x1, 0x2, 0x2, 0x6, 0x20, "c457b202"}, 0x400, 0x4, @offset=0x3, 0x2, 0x0, r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:20 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x37, 0x3f, 0x4}) 04:10:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) socket$can_raw(0x1d, 0x3, 0x1) 04:10:20 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xce, 0x800) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x10000) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000200)=""/182) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0xc6d6, 0x1f, 0xaa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) 04:10:20 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x400000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x8001}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x8000, 0x7, 0x1}) r1 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x2, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000540)=0xad1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000806446e05069b31d479337f2498e9604e801568a222994a19bcd3870e4fb2d7cebd2dd3c6ac385608f630022398900f143651d8e8bf3b19e66371fac79000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000087e0000"], 0x14}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xce}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44811) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, [], 0x1}, 0xffffffff}, r6, 0x68817a6d}}, 0x48) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) socket(0x22, 0x4, 0x10000) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "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", 0x4a, 0xf7, 0x1, 0x9, 0x20, 0x2, 0xff, 0x1}, r6}}, 0x120) 04:10:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xa74, 0x3, 0x4, 0x2000, 0x5, {0x77359400}, {0x4, 0xc, 0x3, 0x1, 0x5, 0xfd, "9c612e00"}, 0xffffffff, 0x1, @planes=&(0x7f0000000040)={0x1, 0x8000, @userptr=0x9, 0x4}, 0x177}) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x482400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r1, 0x10, 0x1, @in6={0xa, 0x4e22, 0x8000, @loopback, 0x100}}}, 0xa0) 04:10:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x8000, @dev={0xfe, 0x80, [], 0x12}, 0x7e64}, {0xa, 0x4e22, 0x10000, @dev={0xfe, 0x80, [], 0x31}, 0x36ccd6be}, r4, 0xffffffff}}, 0x48) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:21 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x2, {0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x5}, r3}}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r5, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r6, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1834aaeeda8e00"/24, @ANYRES32, @ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x94, &(0x7f0000000100)=""/148, 0x41000, 0x0, [], r6, 0x1, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xfffffffc}, 0x10, 0x0, r7}, 0x78) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc2, 0x8000) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1000, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0xbb4, 0x2000009}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xb235, 0x602000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x3, 0x7, 0xfffffff8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8004, 0x5, 0x1}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8001, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x7ffc, 0x1, 0x2}) socket$inet(0x2, 0x1, 0x9) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x6, 0xe0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x60000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0xff, 0x80000000, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x6, 0x2, 0x2b, 0x0, 0x0, 0x10000, 0x244b, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x1}, 0x5, 0x6, 0x101, 0x1, 0xfffffffffffffff8, 0xba, 0x20}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7f, 0x90, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x1f, "ccda42", 0xf0, 0x5}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:21 executing program 2: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x400000000000, 0x117480) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0xa82, 0xffff7fff}) 04:10:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x9, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:21 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:21 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:21 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xff, 0x4bc201) getpgid(0x0) 04:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000080)={0x50000000, 0x4, [0xfffffc01]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), 0xffffffffffffffff, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000000)={r1}) 04:10:22 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x54222cd8, 0x0) 04:10:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x400ac3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xe4de, 0x4, 0x7}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000100)=""/37) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="7a842afa9c07cad136a800ac465c14d5459646e0b433f17cf4278bebba8bf3f60b4e701e5f87384e6efd86dc0d18cdd7f3a8050deb807edea5a728dd0b9791726c9a6d0973ca29424652b6c15d6ac524d5461edbe8de71410b12d3930039ca40675079a7ea9c77002949ac41454a0f3382dd57716b54b046a706e130bbd7c7a6f7d66478c691", 0x86) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:22 executing program 5: r0 = getpgrp(0xffffffffffffffff) getpgid(r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000100)={&(0x7f0000000040)=""/175, 0xaf}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:22 executing program 1: ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000240)={0x8, 0x30000}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xb8, @private0, 0xfff}, @ib={0x1b, 0x2, 0x7f, {"c2e57f23e4a17623dd71e1bd7bb0c08e"}, 0x2, 0x3, 0x1c1a}}}, 0x118) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000000000, 0x531000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:22 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000001c0)={0x6, 0x118, 0xfa00, {{0xfffffff9, 0x6, "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", 0x80, 0x5, 0x7, 0x7, 0x7, 0x0, 0xff, 0x1}}}, 0x120) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x680482) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x8, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r4 = socket(0x26, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000300)={0x2, &(0x7f0000000780)=[{@none}, {@fixed}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4, 0xfa00, {r5}}, 0xc) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r7, 0x1}}, 0x18) 04:10:22 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x10000, 0x82cc40) 04:10:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0x1000}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, &(0x7f0000000140), 0x4) 04:10:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000300)=0x1) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r1, 0x1}}, 0x18) 04:10:22 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x9, 0x142) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@any, 0x5da}) 04:10:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x5, 0x23840) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)={@any, 0x8, 0x81, 0x8, 0x0, 0xfff9, "1367a32cf0379ebe7fbc49ed7be42ea2c42c1fca7def21998ef6700c790899984e8e935baf2798b70256e27c64a5b9540c2e93604bd8c854ccb81247acd3643528a63bfd4b1e6e12a7cf1c78446db73cdf8d305cd75c47b924da2ca538f44b30b49dafb062e46d8a6da417a9c2182a023fb01f2602d1164b8954d758571c70f3"}) 04:10:22 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r2 = getpgrp(0xffffffffffffffff) getpgid(r2) r3 = getpgrp(r2) getpgid(r3) ptrace$peeksig(0x4209, r3, &(0x7f0000000040)={0xee47, 0x0, 0x3}, &(0x7f0000000100)=[{}, {}, {}]) syz_open_procfs$userns(r3, &(0x7f0000000000)='ns/user\x00') 04:10:22 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:22 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r1}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='/dev/dri/card#\x00') 04:10:22 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x490000) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1000, 0x200000) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x678, 0x140) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) 04:10:22 executing program 2: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x4, 0x4, 0x4, 0x0, 0x401, {}, {0x3, 0x1, 0x1, 0x3f, 0xb5, 0xd2, "b234f1ce"}, 0x0, 0x1, @offset, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:23 executing program 2: prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) 04:10:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 04:10:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r3}}, 0xc) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000000)={r1}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x2, 0x18, 0x800, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000100)={r6}) 04:10:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xd5, 0x200201) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x6, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000005c0)) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000180)={r9}) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x1010, 0xffffffffffffffff, 0xaa000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:23 executing program 2: syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x5) 04:10:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x40080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:23 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x3e, 0x7, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:23 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:23 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x400000) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x0, 0x8001}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000180)={0x8000, 0x7, 0x1}) r1 = syz_open_dev$sndctrl(&(0x7f00000004c0)='/dev/snd/controlC#\x00', 0x2, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000540)=0xad1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000806446e05069b31d479337f2498e9604e801568a222994a19bcd3870e4fb2d7cebd2dd3c6ac385608f630022398900f143651d8e8bf3b19e66371fac79000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000087e0000"], 0x14}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)={0x44, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xce}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x44811) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, {0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, [], 0x1}, 0xffffffff}, r6, 0x68817a6d}}, 0x48) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x2ca00) socket(0x22, 0x4, 0x10000) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x2, 0x8, "cf8cb87de49f251b2d68f99e2fd8936aac02989671ef827979a2b64cbd00d3c49e2540869b5bbd62be1c9bfcef5010ce8cf94b594385502d7827e604f86f6a5d6d2a1bbacca343aef01f25f8310faebb683d8ad7538b4041118e3692dd289aa452339fae0f4aa994add783743ef2571db0a6550768ee189b612f029f2e0cba3d98da1ec7f009f37b00af89180c11ff0fdc71a3466dabfcddf1aaaa7ec11c6a9d4f6034196bebf572d58a0554e896aaccc1cba2f832ed24b7a97e2de891e1ae2c319c7b7617a3a2664f6013cc2488ca167ecb63643911851521e669900859f3878818658f462b2a245b6b4c0855b835322d2d3c1688abc801914b65c327310e40", 0x4a, 0xf7, 0x1, 0x9, 0x20, 0x2, 0xff, 0x1}, r6}}, 0x120) 04:10:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x10040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:23 executing program 5: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0x1000, 0xfffffffc, {r2, r3/1000+10000}, {0x3, 0x2, 0x0, 0x5e, 0x1, 0x9, "27814bc9"}, 0xfffffbff, 0x1, @offset=0x5, 0xfff, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x2, 0x5, 0x4, 0x2, 0x1, {r0, r1/1000+60000}, {0x3, 0x99d2476b46025248, 0x40, 0x1f, 0x3, 0x0, "e61cea0c"}, 0x10000, 0x3, @offset=0x2, 0x2, 0x0, r4}) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) 04:10:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x100, 0x0, 0x10001}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:23 executing program 4: setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)=',/\\\x00', 0x4) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3ff, 0x3, 0xe1}) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x3, 0x12000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x3, 'syz1\x00', 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x6, 0x200082) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xffffffff, 0x400004, 0x8000001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) 04:10:23 executing program 5: r0 = socket(0x15, 0x6, 0x7ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000008f9450da942ae437d5f605707cea1ef861418276f7eef218f8466bee", @ANYRES16=r2, @ANYBLOB="000327bd7000ffdbdf250d00000008003a00ff0f000005003000010000000800310012c8000008000b003f00000005002d000000000005003000010000000a000900ffffffffffff0000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r4 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x79, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000300)=0x80000001) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) 04:10:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:23 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x42) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x20009, 0x101080) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x7fff}}, 0x10) [ 3587.922529] Bluetooth: hci4 command 0x0401 tx timeout 04:10:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x92, 0x8000) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000140)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000000c0)=0x8000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x117042) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) mmap$perf(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x3000003, 0x100010, 0xffffffffffffffff, 0x76) 04:10:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x200000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x1000, 0x1d, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x200000) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xfffffffc, 0x5, 0xfd79}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r5}) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)={r5}) 04:10:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x8200) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x200, 0x8000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1, 0x5, 0x3f, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x6, 0x101000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x111040, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000240)={0x8, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)}) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x3, 0xffffffff, 0x81000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7, 0x9, 0x7fffffff}) 04:10:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2a, 0x14240) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 04:10:24 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x2400) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "92107a", 0x6, 0x5}) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x100) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="7d0000005d0c0000030000000cd77f1eded37c29e0cb2b4a562e2491af80053f7db5ce9c15ccef5bd8b8416082490dd3d14011830ffc05283633c7026f5dbc8fb1faa5be3804a8cfb8037d0c9853ad73c01bcb0cc727a8a3d80d4f43cc42545fd0ee3d8d44e213b2d8d6e9b3944c15c5e6fb194241ee633d7f83d13a77e1aeaabe80a7514b6dd14c741ef6fb12e2e0f7"]) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:24 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0xc6d6, 0x81f, 0x19, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r6}) 04:10:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x38, 0x9322, 0x7, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000100)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x8000, 0x1, 0x8000}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) socket(0x28, 0x2, 0x87fff) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x80000000, 0x5, 0x18a1}) r2 = accept4$x25(r1, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x180000) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000140)) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000000)) 04:10:24 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x81, 0x102) 04:10:24 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:24 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffd, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:24 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x210800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0xc6d6, 0x22, 0x101, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x1d9181) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0xab3, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r8}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r9}) 04:10:24 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r5}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000200)=""/216) 04:10:24 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000000)) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000201240000000800000007c1f63908000002000006000000f7ffffff060058fcd3acdb00ae5d7de9e2bd2d"]) 04:10:24 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x9}}, 0x10) getsockname(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000003c0)=0x80) recvfrom$rxrpc(r3, &(0x7f0000000400)=""/29, 0x1d, 0x100, &(0x7f0000000440)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:25 executing program 0: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x4c0102) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x280, 0x440) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000200)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f00000004c0)='/dev/sg#\x00', 0x5, 0x100) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000500)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00', r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xbe}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x90000000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40004) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fddbdf25e83b5bed03293174957b7759d1322ad70800000005003800", @ANYRES32=r7, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000041) socketpair(0x11, 0x2, 0x40, &(0x7f0000000240)) 04:10:25 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x3f, 0x63, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) socketpair(0x1f, 0x1, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e69aa7728539"}]}, 0x20}, 0x1, 0x0, 0x0, 0x10810}, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r1}) 04:10:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x0, 0x4, '\x00', 0xff, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x100) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000280), &(0x7f0000000240)=0xff29) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:25 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x5, 0x3f, 0x0, 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r6 = accept4(r0, &(0x7f0000000640)=@in={0x2, 0x0, @broadcast}, &(0x7f00000006c0)=0x80, 0x100800) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f0000000700)) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000440)) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) r7 = socket(0x26, 0x5, 0x0) accept4$x25(r7, 0x0, 0x0, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000740)={r6, r8, 0x800, 0xd5, &(0x7f0000000540)="1f2fd9f43ca280b74ca04e377f0459295ff612021542c8959e9b9fc18e1f249d1459bf96b225b638f46f28c1dc965d5a610357bc1f986018568ecb9787d158785717e9b2289cec8d485225a5f4b3a1157275a733834dd4cb83a6d5dcffceb76029659d7fe139f0d4901b96fe875730b3f9d6326a64f2b6a2af1cbd411d78689fa250ae2d6d2eeb57dd22fad1acd21f84285a3d57f8a66d16f9e6b313016a8eb2755a2699f6bd608473c14bc44d6bea474bbe6b693a4638ed5c87ecf3e4761fe78d1da92ca712eaad37a5ea8c0bee1e4bf9f86b0a23", 0xfe, 0x3, 0x486, 0x5, 0x200, 0x3, 0xff, 'syz1\x00'}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x3, {0x2, 0x3, "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", 0x8, 0x4, 0xdc, 0x3, 0x7, 0x8, 0x8, 0x1}, r4}}, 0x128) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) 04:10:25 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 1 (fault-call:7 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x5, 0x181000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0xfffffffd, 0x1}) clock_gettime(0x5, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:25 executing program 2 (fault-call:1 fault-nth:0): r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x8, 0x80080) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xffff, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x4, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x8, 0x800, 0x10001}) syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x400) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r1}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x3f, 0x521100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000300)={r4}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x3, {0xa, 0x4e20, 0x70c31d78, @mcast2, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r7}}, 0x18) 04:10:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:25 executing program 2: socket(0x2b, 0x4, 0xffffffff) r0 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x142, 0x0, 0x0) 04:10:25 executing program 2: syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8, 0x84000) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:26 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) 04:10:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x3d, 0x2}) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7, 0x84000) 04:10:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:26 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) 04:10:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket(0x26, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0xbc, 0xfffffff8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3590.012229] Bluetooth: hci4 command 0x0401 tx timeout 04:10:26 executing program 2: r0 = socket(0x10, 0x1, 0x3) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000000)=""/250) 04:10:26 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x19b18e93, 0x83) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x4, 0x9, 0x1, "9ada3951"}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 04:10:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xc6d3, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x1, 0x10a80) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000240)={0x6, 0xe4, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000080)={0x3, 0x3, "689ec9", 0x1, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) 04:10:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r3, 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x110, r3, 0xe000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000510f4b04eb2b8a60ca76ae3edc0587401d91740cf2964fbbdca93a171d97359455734d16734205e53bb7f698a0f0b4e3594bca7fca980000000000855c5f111464f6041af93da6bc28180020bd7556f7c9203691def3665d3da6a740046bafb6f226603ef4f63ed408df50ee7500dd3f86b27975cef3e22eea146a53cf2bfd64fec88da18fce618bbfc4f0c5fe9bf6a4ba5ae0ad9b32cfba6aa542a85462cd440f4034ad2c079ae6d730f4386c8d7c2f2f912303821674a446a31e95bd1cf05d7a371ca2ec32080b59361a6d50ef7fa1a047df"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf250400000000000001000000000000000011e719b46a82", @ANYRES32=r5, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x59ba508b52e50674, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40400d1) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffffffff60da, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000100)) r1 = socket(0x23, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:26 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00000000c0)={0x7, 0x507425fe1f4b99a2, 0x4, 0x3, '\x00', 0x7}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1, 0x200000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000140)=0x10000) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x4600) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) 04:10:26 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @hci={0x1f, 0x1}, @qipcrtr={0x2a, 0x0, 0x2}, @ethernet={0x6, @remote}, 0x8000, 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000000), 0x1, 0x9, 0x3ff}) 04:10:26 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x280) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0xa, 0x0, 0x3, 0xfff, 'syz0\x00'}, 0x0, [0x75f, 0x6, 0x1f, 0xfffffffffffffffd, 0xee, 0x628b, 0x37, 0x80000001, 0x3f, 0x7, 0x3f, 0x8, 0x7ff, 0x3, 0x9, 0x97e, 0x9, 0x200, 0x40, 0x7, 0x387, 0xfff, 0x4, 0x7fff, 0xfffffffffffffff7, 0x2, 0x34, 0x7, 0x1, 0x1, 0x90fe, 0x0, 0x0, 0x100000000, 0x65d, 0x7, 0x7fffffff, 0x44e, 0x1c000000, 0xdf, 0x783, 0xff, 0x5, 0x7, 0x40, 0x9, 0x0, 0xb2c, 0x6, 0x91a, 0x3, 0x400, 0x0, 0xfffffffffffffff8, 0x1, 0xc7, 0x4e7, 0xe3, 0x0, 0x4, 0x8, 0x3, 0xf48, 0x8, 0x1000, 0x4, 0x5, 0x6, 0x3, 0x8001, 0x8, 0x5, 0x5, 0x0, 0x0, 0x6, 0x20, 0x9, 0x1000, 0x8ed8, 0x0, 0x800, 0x1, 0x9, 0x9, 0x0, 0x10001, 0x4, 0x0, 0x0, 0x7, 0x0, 0x400, 0x1ff, 0x24f, 0x81, 0x5, 0x80, 0x100, 0xfffffffffffffffe, 0x3, 0x7, 0x1, 0xffffffff, 0xffffffffffff8000, 0x3, 0x3, 0x8, 0x4, 0x68b, 0xa50, 0x8, 0x5e6193f5, 0x3f, 0x101, 0xc1, 0x4, 0xfff, 0xfffffffffffffff9, 0x9, 0x3f6, 0x8001, 0x7, 0x80000000, 0xffffffffffffc110, 0x7fff00000000, 0x8, 0x4117]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:26 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x1f, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x61248316, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x40) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x20, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x0, '\x00', 0xff}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:26 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x80000001, 0x6, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) write$char_usb(r0, &(0x7f0000000080)="7020b2f1f94a529829ea3ee88ece8dd57151af", 0x13) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)={0x28, 0x2, 0x1, "877cb8e15d80f4a83606798342ff80118c7806339a6c464fab1a0c482cc4f2bf5307a4623f649e9e"}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:26 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:27 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x43, 0x3f}) socket$bt_hidp(0x1f, 0x3, 0x6) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 04:10:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x7f, 0x10000009, 0x4}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x20000) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x401, 0x400002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x8000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x20, 0x8db5, 0x0, 0x0}) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) 04:10:27 executing program 2: r0 = socket(0x2b, 0x80000, 0xfffffffd) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x0, 0x0) write$fb(r1, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) sendto$rxrpc(r2, &(0x7f0000000040)="b399a3bd6a6f6970e84e113d023062f9baafcbc8d7058cfa3c6467f765a57b04672408899d20548846b34e9ef520d07130841523cc50a88835ccfc0daf1fcc2df0b88dd8995354f4d0ea89be9b74", 0x4e, 0x20000000, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @remote, 0x20000000}}, 0x24) write$fb(r1, &(0x7f0000000000)="64e8a6ae2c0948d52d95ad73c7fbcb507b42fec58db9e3a1357349c3acc4af11c79e1d710df7ed8d50eaabf665166bcda8a2f9", 0x33) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f00000013c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x3fff}, @xdp={0x2c, 0xf, 0x0, 0x32}, @ethernet={0x1, @random="c2d2538523e7"}, 0x8cd, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='veth1_to_bridge\x00', 0x5, 0xfff, 0x7fff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004010}, 0x40000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:27 executing program 2: socket(0x2b, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) socketpair(0x2a, 0x4, 0x2, &(0x7f0000000340)={0xffffffffffffffff}) recvmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000100)=""/60, 0x3c}, {&(0x7f0000000140)=""/205, 0xcd}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/201, 0xc9}], 0x5, &(0x7f00000014c0)=""/251, 0xfb}, 0x40012000) getsockname(r0, &(0x7f00000015c0)=@ethernet={0x0, @multicast}, &(0x7f0000000440)=0x80) recvfrom$rxrpc(r2, 0x0, 0x0, 0x12100, 0x0, 0x0) 04:10:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) [ 3591.202187] Bluetooth: hci0 command 0x0401 tx timeout 04:10:27 executing program 5: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000000000000000, 0xb02) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x902, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x958}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xf7d, 0x4400) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:27 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r5, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r6, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r7, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r8, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x21b05474}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0xff, 0x1f7, 0x2f}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x0, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000140)=@buf) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:27 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8e3109456f046f99}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x6000000}, 0xc4) get_thread_area(&(0x7f0000000000)={0x7ff, 0x0, 0x1000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}) get_thread_area(&(0x7f0000000040)={0x3, 0x20000800, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x1}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) socket(0x6, 0x6, 0x0) 04:10:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x4200, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@fixed={[], 0x10}, 0xfffffe01}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x4, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x622200, 0x0) ioctl$FBIOPAN_DISPLAY(r4, 0x4606, &(0x7f0000000200)={0x578, 0x78, 0x20, 0x140, 0x7, 0xbb0, 0x8, 0x2, {0xd94, 0x97f, 0x1}, {0x1, 0x40}, {0x8, 0x7, 0x1}, {0x73}, 0x1, 0x2, 0x0, 0x8, 0x0, 0x8, 0x7c47, 0x5bb, 0x541, 0x40000007, 0x1, 0x4, 0x31, 0x2, 0x1, 0x8}) ioctl$FBIOBLANK(r2, 0x4611, 0xffffffffffffff77) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000380)={0x13, 0x10, 0xfa00, {&(0x7f0000000600), r6}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x101) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000003c0)={0x4, 0x6, 0x8001}) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x0, 0x0, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:27 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffff, 0x105040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:27 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000001140)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/65, 0x41}], 0x3, &(0x7f0000001180)=""/55, 0x37}, 0x140) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = accept4(r0, &(0x7f0000001700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001780)=0x80, 0x800) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000018c0)={r1, r2, 0x6, 0xd6, &(0x7f00000017c0)="3445b49e51d2c86fbb194b796ce8b6c43df0182ba0541e6dc6ec06ce47d976ac0cdc57b34295a96c09549924a07607fc2feaea1e9e75b89ae9bf51da4068ef7f3419b6c92541d17fc1fa590cd5de7355965943a7047abe8556a8131615a9055453b9bfd3e46b1648abee77da1e95c64d8ce4d637503fa72f89a06117b569ec0ae3ce867a5d62c64c493cd1d1e045567cde71b433532265e7576688152900354e1d628848ceeeabee432cc69d9c86eb8443f423cefa03615e444c1803c0e8c264b5ff40a90d75659c210ce8fa23ae175ac711aeab9c19", 0x1f, 0x1f, 0x81, 0x0, 0x20, 0x0, 0x20, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000001200)={{0x0, 0x3, 0x2, 0x5, 'syz1\x00', 0x10001}, 0x1, [0xfffffffffffffffe, 0x100000000, 0x3, 0x4, 0x6a68, 0xfff, 0x6, 0x7, 0x6, 0x3f, 0x9, 0x6, 0x8, 0x29a7, 0x1405, 0x5, 0x8, 0x8001, 0x91b, 0xfffffffffffffffc, 0x8, 0x3f9, 0x3, 0x7, 0x7, 0x1, 0xffffffff00000001, 0x1, 0x200, 0x800, 0x7fff, 0x7fff, 0x101, 0x7, 0x6, 0xda13, 0x44b, 0x7fffffff, 0x9, 0x411, 0x6, 0x0, 0x400, 0x0, 0xdf, 0x0, 0x8, 0x7fff, 0x2, 0x0, 0x7fff, 0x81, 0x9, 0x1, 0x4, 0x9, 0xfffffffffffffff7, 0x1, 0x5, 0x100000001, 0x5, 0x3, 0x8001, 0xffffffff, 0x730, 0x4, 0x170, 0x7f, 0x81, 0xffffffff, 0x8, 0x800, 0x0, 0x2, 0x1, 0x909, 0x101, 0xfffffffffffffffd, 0x4fb7, 0x800, 0x5, 0x0, 0x4bd3, 0x10001, 0x8, 0x1, 0x7, 0x9, 0x0, 0x2, 0x8, 0xc949, 0xa12, 0x2, 0x81, 0x4, 0x7f, 0x3ff, 0x100, 0x100000000, 0x9, 0x8, 0x3, 0x1000, 0x1, 0x800, 0x4, 0x0, 0x9, 0xffffffff, 0x7fffffff, 0x7, 0x1, 0x4, 0xe3, 0x7, 0x9, 0x5, 0x100000001, 0x10000, 0x1, 0x8000, 0xc, 0x2, 0x7fffffff, 0x52, 0x1, 0x100]}) 04:10:27 executing program 5: ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f00000003c0)) r0 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x80000000000005, 0x282103) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x8, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000240)) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1898, 0x48803) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={0x0, @xdp={0x2c, 0x5, 0x0, 0xb}, @generic={0x2, "4f788515b097d1ad60287f84f934"}, @nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='ipvlan0\x00', 0xfffffffffffffffb, 0x4}) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) 04:10:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r6 = socket(0x10, 0x80000, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00', 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x60, r7, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x26}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0xc000) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) write$fb(r4, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000280)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r9}) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 04:10:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x0, 0x80081) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x2, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r5 = socket(0x26, 0x5, 0x0) accept4$x25(r5, 0x0, 0x0, 0x0) getpeername$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffe, 0x601) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 04:10:28 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x8800) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0xb1b2b13aeeb55c67) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) accept4(r3, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0xfffffe16, 0xc0000) 04:10:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)) 04:10:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:28 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x80800) 04:10:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xea80) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x2800) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x80000000, @loopback, 0xfc}, {0xa, 0x4e23, 0x2, @loopback, 0x3}, 0xffffffffffffffff, 0x5}}, 0x48) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x7ff, 0x12543) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000180)) 04:10:28 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000000000000000, 0xb02) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x902, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x958}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xf7d, 0x4400) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x80000000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x40902) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:28 executing program 4: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:28 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:28 executing program 2: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x50, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) 04:10:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xffff, 0x40000) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000140)='/dev/dri/card#\x00', 0xf) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) r5 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000000100)=0x80000000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000080)={r3}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) 04:10:28 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x4, {0xa, 0x7ff, 0xa9f, @private1={0xfc, 0x1, [], 0x1}, 0x7}, r1}}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000200)={{0x5, 0x1a977c6126728005, 0x3, 0x7, '\x00', 0x20}, 0x1, [0x1ffe0, 0x4, 0x5, 0x8, 0x84f8, 0xff, 0x3, 0x8, 0x425, 0x80000001, 0x8, 0x0, 0x6, 0x3, 0x8, 0x28000000, 0x2, 0x40, 0x9, 0xd24, 0x7fffffff, 0x40, 0x400, 0x203, 0x3f, 0xffffffffffffffff, 0x7, 0x40, 0xfffffffffffffff7, 0x200, 0x5, 0xd5b8, 0x401, 0x0, 0x7, 0x80200, 0x7, 0x9, 0x1, 0xfff, 0x3, 0x1, 0x1ff, 0x1, 0x7, 0x7f, 0xa, 0x6, 0x1ff, 0x7b67fdc1, 0x2, 0x1, 0x1, 0x8, 0x10000000, 0x6, 0xea0, 0x5c6, 0x10000, 0x4, 0x391e9e94, 0x7800, 0x7, 0x6, 0x10001, 0x3, 0x101, 0x3, 0x5, 0x3808000000000, 0xf800000000000, 0xfffffffffffffeff, 0x100, 0x2, 0x1, 0x2, 0x0, 0x8fa, 0x20, 0x2, 0x2, 0xd43, 0x0, 0x3, 0x9, 0x7a299869, 0x6, 0x5, 0x8, 0x49d4, 0x40, 0x400, 0x8, 0x1, 0x0, 0xfffffffffffffffa, 0x6f, 0x9, 0x2, 0x0, 0x80000000000e8e, 0xff, 0x7, 0x8, 0x7ff, 0xbca0, 0x8, 0xff, 0x5d, 0x0, 0x6, 0x200, 0x2, 0x44, 0x100000000, 0x69d0, 0xffffffffffff7fff, 0x80000001, 0x3, 0x0, 0x40, 0x5, 0x10001, 0x6, 0xffff, 0x32, 0x3f]}) clock_gettime(0x2, &(0x7f0000000d00)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)={0x4, 0x0, 0x0, 0x4000}, &(0x7f00000000c0)={r3, r4+60000000}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000cc0)={0x5, 0x10, 0xfa00, {&(0x7f0000000ac0), 0xffffffffffffffff, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000a80)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f0000000700), r6, 0x2}}, 0x18) r9 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x50902) ioctl$SCSI_IOCTL_DOORLOCK(r9, 0x5380) 04:10:28 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket(0x26, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0xbc, 0xfffffff8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:28 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r5 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0xffff0000, 0x3d6, 0xffffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000140)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:29 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000300)) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x7f, 0x9}) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:29 executing program 4: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:29 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x50, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) 04:10:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = getpgrp(0x0) syz_open_procfs$userns(r4, &(0x7f0000000100)='ns/user\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000140)={0x3, 0x6, 0xa2, 0x6, 'syz0\x00', 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f00000000c0)={0x8, 0x2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3592.962188] Bluetooth: hci1 command 0x0401 tx timeout 04:10:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r5, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, &(0x7f0000000040)={0x3c, 0x1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000001c0)={r3}) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x200260, 0x400301) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r8}) 04:10:29 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x50, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) 04:10:29 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 04:10:29 executing program 4: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = accept4$x25(0xffffffffffffffff, &(0x7f0000000100)={0x9, @remote}, &(0x7f0000000140)=0x12, 0x80800) ioctl$sock_x25_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={@remote={[], 0x3}, 0x6, 'bond0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) syz_open_dev$dri(&(0x7f0000000300)='/dev/dri/card#\x00', 0x100000003, 0x2d2581) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000002c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x20, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3593.281967] Bluetooth: hci0 command 0x0401 tx timeout 04:10:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xbf, 0x571842) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:29 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x50, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1) 04:10:29 executing program 2: r0 = socket(0x27, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:29 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d3, 0x11d, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000040)={r1}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r4, 0x110, 0x3) 04:10:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x400000) r1 = socket(0x26, 0x5, 0x0) accept4$x25(r1, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={@any, 0xaa2, 0x3f, 0x5, 0x6, 0x8, "6d2d5ed11f884c384efeeefa4d0006794794d8e5132e59db6f44c80006457914357c257a1fad284954b271cc2a697202eb832177810d9b9cb0a78d2419713a6698d19774a922149d88d27c7c02ad14d6f7943c22f0c6a43481db075b8fb5f28bdfa896c680ed80b0e61d999fe9a6ad967e4fb518bafc9adbf322af6d2ddb295d"}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:29 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:29 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x80000000) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:29 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7, 0x80a00) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x3, 0x8300) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000000c0)=0x400) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000200)) 04:10:29 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x3, 0x50, &(0x7f0000000000)) 04:10:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x10000, 0x4100) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000100)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:29 executing program 5: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x22}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x83, 0x142) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:29 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x54380) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7fffffff0, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc2d4, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0xb9, &(0x7f0000000000)="d339e57e355887bab91f2cea93a2577f0e218d7e29b91f89dec402e4e65781f3991f8c49f099847fb85c0dec08c23950da9aae0d8b8caef4bde5675ae640eb3b3fa9474d2f5f603dd7b68ce5f2eb31cec75ad00be50fef7b2a1f9d5d839ea0a96eb6cb1fb03472848f0a7232956510d21a5e54449e7229e81021b91266e4390eef2f5407ed9236ee5cebe23bbb4b7fa64f3a65406d4a28985c22f75a38119f48b2d1169e8154d3820a08b8d560022abc63016e40b32eeeaf07"}) 04:10:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:30 executing program 1: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x40800) getsockname(r0, &(0x7f0000000380)=@pptp, &(0x7f0000000400)=0x80) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d7, 0x1f, 0x6, 0x0, 0x0}) accept4(0xffffffffffffffff, &(0x7f0000000700)=@phonet, &(0x7f0000000780)=0x80, 0x80800) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1b, "6546b4", "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"}}, 0x110) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r3}) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffa, 0x5a082) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:30 executing program 3: syz_read_part_table(0x3ff, 0x9, &(0x7f0000000640)=[{&(0x7f0000000040)="268077ce3e8763e9c6b2754dab469d30082e373767517706b6554fa68179c9fde2", 0x21, 0x2}, {&(0x7f0000000200)="0d6bb1736e7ce82f843adadbb65e13fbcc9c45d29f6c35b49176ffcf11bced59702b57bdb068242cc27c121e832c1ca4c17242b7e6de1eaaaf0b87297bda45d89bcf0794b6195a2dce00f15fba14f20da7b45057b74dccb36bfebc9760d4adaeb86e797a699c9848e5f9415c278b460761540039c41fcabe63119de30d051c0315db9268498c586327f4eb449d486a8a549b1041739a5d105d0647851969d8c9a78229845720276d5ffd666bc1cb9f0783b964e6bf3c06acb07b6e36855e6f7a1bd3e69caf08506c4bd0", 0xca, 0x7ff}, {&(0x7f0000000080)="85cc32076a5411b66cc2317a0a2d29224ff8b86610f7549f0939782d5f59aac3d71ac5684163c16701b82eeb328749365d5ee12723af10888998929cbb823f3fd4d39d8756e62b36e53112420368df7eca3d953bfadedf6e9251bb68f5437b0e68971f92a2b66771", 0x68, 0xc64b}, {&(0x7f0000000140)="cf3bfc16e9b75626664f8435f5e4c907348bd151dcf80f7b5d9ed624974ba29a0a4eaa1252b32edc1a63753433dc9fe4a6f75ca7138ef0f550df", 0x3a, 0x7ffffffe}, {&(0x7f0000000300)="8b2be9b19471364fa8f20b6bed21e08f5c6a80b59330efd3473b9edd4f87b9ae3b8cdbbda9d92d44c02d2a23a7a50e28b1d7d23b1835d8adc14ba28703091d9511278a7a48359eaadf8511f2a93e692a79b572f7baa292cff290e1b716f99525d91a8c3f0af75eb4d1f760b46fa257908a33cbd2319423f79b2e72bbb31fdb4101ea025178aaa744ab31", 0x8a, 0x81}, {&(0x7f0000000180)="114fdf8f47e148b0ce45dfa4f504de3ed7f1edd6799fb93bf347b6617a55adac1ab5a42fa7b8c9b9af354f9ad1ee9fd9d277674f0d37f52ffb1037b1", 0x3c}, {&(0x7f00000003c0)="36a96361b237b8c5ac2c925622762a3b1bf736b8d84f9bc4aae1636f1b368b8ecdf2e444c41169736fc697bb0c99125256167fc089da666112b5a7c3f66d0d06573da825c51af0e080bb2495a8a1d8a4239ef2eca903f3b76bd3ecaf6b57919bbe3a96c6bcef8b07690dfe5e8120962daefa10c152c16c2e32f4358f964b4a793d48cf9e4b0d655e16bd53bb6245f72de034047b1527569b6d5e34f518d39ee1de554f80dcdd0255f6f6f597713818dd5b82eeaec25fcf57b037", 0xba, 0x81}, {&(0x7f0000000540)="27344f115ba8e1f6259f0383a4b06615e3d6b033b6ac70a07051fc1a009ceeb1f45957aeb61a5fe7254714fed96a90e37f1876b35c38f05807bea9ee99449554102334e7c146380a166a0b73b3f90a7d01e8091ee4fc915da59926df09b9e634ccf3d22d7a333d331ed81079079c368a04d667c8d1e5f0c5f854c48261ffd85db98fc4d67d4bc90ccd2a45f143fb3c07b05951eb41bd79cb9ff24777fc3b6f418df6f7ad05091e02c9cacecdc6cf9bda7a6db34c331bf8fdf3ae6134f5c78f654078a84bf85a1ca6ca01cd9bf36b49b3bcbf2b9cc1c89773e6ec52183f687f1153", 0xe1, 0x5}, {&(0x7f0000000480)="dece45185e0e0879f626ea05b32cc8310dcd4ae6d928fe0af1b7df", 0x1b}]) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x220000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_read_part_table(0x4, 0x1, &(0x7f0000000740)=[{&(0x7f00000004c0)="d8b0c831d37634911d2cdc6bd50cd138b0ab68b0b1ebf8fca32196", 0x1b, 0x5}]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 2: r0 = socket(0x2a, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x732}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x190eebc4fb43a58}]}, 0x54}, 0x1, 0x0, 0x0, 0x50800}, 0x48054) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 5: ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000040)=""/87) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x81, 0x6, 0xce, 0x3, 'syz1\x00', 0x2}, 0x0, [0xffffffffffff8000, 0x7cbb, 0x5, 0x9, 0x7, 0x800, 0x2e45749f, 0x8, 0x3ff, 0x2, 0x5, 0x3, 0x80000000, 0x10000, 0x8000, 0x400, 0x0, 0x7, 0x1, 0x3, 0x4, 0x820, 0x7, 0x5, 0x8, 0x1ff, 0xfff, 0x4, 0x7, 0x80000000, 0x68a, 0x80, 0x3, 0x9d22, 0x4, 0x4, 0xfff, 0x4, 0x1f, 0x95, 0x4, 0x1, 0x7fffffff, 0xc4, 0x1000, 0xad, 0x8, 0x8000, 0x81, 0x40, 0x5, 0x5, 0x2, 0x7fff, 0xbfa5, 0x4, 0x7fffffff, 0x5, 0x4, 0x3, 0x26a1, 0xff, 0x5, 0x6, 0x800, 0x39, 0xffff, 0xa6f, 0x100000000, 0x9, 0x5, 0x80000000, 0x40, 0x7, 0x8, 0x1, 0xfff, 0x200, 0x12e6, 0x5, 0x4, 0xffffffffffffff80, 0x5, 0x1f, 0x1, 0x3ff, 0x4da1f7e1, 0xe03, 0x3, 0x7ff, 0xf1, 0x7ff, 0x7e, 0xffff, 0x7, 0x8000, 0x1, 0x5, 0x40, 0x3, 0x0, 0x81, 0x2, 0xf8, 0x80, 0x2, 0x2, 0x8, 0x9, 0x49cc, 0x0, 0x100, 0x100000001, 0x0, 0x3ff, 0x0, 0x7, 0x1800000000000000, 0xffffffffffffffff, 0x4, 0x7, 0x9, 0x7, 0x8, 0x100000001, 0x4, 0x0, 0x401]}) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000005c0)={0x5, 0x2, 0x0, 0x5, '\x00', 0xfffffff9}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:30 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x7ff, 0x240) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x82, 0x145000) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xfffffffffffffff9, 0x20380) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x4, 0x600000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:30 executing program 2: socket(0x2b, 0x1, 0x4) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x4d, 0x40016102, 0x0, 0x0) 04:10:30 executing program 0: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) getpgrp(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x842c00) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:30 executing program 0: r0 = socket(0x0, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 2: r0 = socket(0x2a, 0x800, 0x0) recvfrom$rxrpc(r0, 0x0, 0x30, 0x0, 0x0, 0x46) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) accept4(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80, 0x80800) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x3f, 0x5}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:30 executing program 0: r0 = socket(0x0, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x401, 0x2d07c1) r3 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x8001, 0x408000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:30 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xc8143) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x10000) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x40000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xff, 0x10000) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0xa, 0x3, 0x5, 0x80800}) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) 04:10:30 executing program 2: r0 = socket(0x2b, 0x1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3f, @empty, 0x4}, @in6={0xa, 0x4e23, 0xfffffffb, @remote, 0x80000000}}}, 0x118) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff2573}]}, 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x40) 04:10:30 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x82c82, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)) mmap$fb(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x40010, r0, 0x44000) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000040)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r8}) 04:10:30 executing program 4: syz_read_part_table(0x3ff, 0x9, &(0x7f0000000640)=[{&(0x7f0000000040)="268077ce3e8763e9c6b2754dab469d30082e373767517706b6554fa68179c9fde2", 0x21, 0x2}, {&(0x7f0000000200)="0d6bb1736e7ce82f843adadbb65e13fbcc9c45d29f6c35b49176ffcf11bced59702b57bdb068242cc27c121e832c1ca4c17242b7e6de1eaaaf0b87297bda45d89bcf0794b6195a2dce00f15fba14f20da7b45057b74dccb36bfebc9760d4adaeb86e797a699c9848e5f9415c278b460761540039c41fcabe63119de30d051c0315db9268498c586327f4eb449d486a8a549b1041739a5d105d0647851969d8c9a78229845720276d5ffd666bc1cb9f0783b964e6bf3c06acb07b6e36855e6f7a1bd3e69caf08506c4bd0", 0xca, 0x7ff}, {&(0x7f0000000080)="85cc32076a5411b66cc2317a0a2d29224ff8b86610f7549f0939782d5f59aac3d71ac5684163c16701b82eeb328749365d5ee12723af10888998929cbb823f3fd4d39d8756e62b36e53112420368df7eca3d953bfadedf6e9251bb68f5437b0e68971f92a2b66771", 0x68, 0xc64b}, {&(0x7f0000000140)="cf3bfc16e9b75626664f8435f5e4c907348bd151dcf80f7b5d9ed624974ba29a0a4eaa1252b32edc1a63753433dc9fe4a6f75ca7138ef0f550df", 0x3a, 0x7ffffffe}, {&(0x7f0000000300)="8b2be9b19471364fa8f20b6bed21e08f5c6a80b59330efd3473b9edd4f87b9ae3b8cdbbda9d92d44c02d2a23a7a50e28b1d7d23b1835d8adc14ba28703091d9511278a7a48359eaadf8511f2a93e692a79b572f7baa292cff290e1b716f99525d91a8c3f0af75eb4d1f760b46fa257908a33cbd2319423f79b2e72bbb31fdb4101ea025178aaa744ab31", 0x8a, 0x81}, {&(0x7f0000000180)="114fdf8f47e148b0ce45dfa4f504de3ed7f1edd6799fb93bf347b6617a55adac1ab5a42fa7b8c9b9af354f9ad1ee9fd9d277674f0d37f52ffb1037b1", 0x3c}, {&(0x7f00000003c0)="36a96361b237b8c5ac2c925622762a3b1bf736b8d84f9bc4aae1636f1b368b8ecdf2e444c41169736fc697bb0c99125256167fc089da666112b5a7c3f66d0d06573da825c51af0e080bb2495a8a1d8a4239ef2eca903f3b76bd3ecaf6b57919bbe3a96c6bcef8b07690dfe5e8120962daefa10c152c16c2e32f4358f964b4a793d48cf9e4b0d655e16bd53bb6245f72de034047b1527569b6d5e34f518d39ee1de554f80dcdd0255f6f6f597713818dd5b82eeaec25fcf57b037", 0xba, 0x81}, {&(0x7f0000000540)="27344f115ba8e1f6259f0383a4b06615e3d6b033b6ac70a07051fc1a009ceeb1f45957aeb61a5fe7254714fed96a90e37f1876b35c38f05807bea9ee99449554102334e7c146380a166a0b73b3f90a7d01e8091ee4fc915da59926df09b9e634ccf3d22d7a333d331ed81079079c368a04d667c8d1e5f0c5f854c48261ffd85db98fc4d67d4bc90ccd2a45f143fb3c07b05951eb41bd79cb9ff24777fc3b6f418df6f7ad05091e02c9cacecdc6cf9bda7a6db34c331bf8fdf3ae6134f5c78f654078a84bf85a1ca6ca01cd9bf36b49b3bcbf2b9cc1c89773e6ec52183f687f1153", 0xe1, 0x5}, {&(0x7f0000000480)="dece45185e0e0879f626ea05b32cc8310dcd4ae6d928fe0af1b7df", 0x1b}]) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xffffffffffffffff, 0x220000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_read_part_table(0x4, 0x1, &(0x7f0000000740)=[{&(0x7f00000004c0)="d8b0c831d37634911d2cdc6bd50cd138b0ab68b0b1ebf8fca32196", 0x1b, 0x5}]) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 0: r0 = socket(0x0, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000100)={@hyper}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x103) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000680)={0x1bacf914c1bad41, &(0x7f0000001500)}) 04:10:30 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x26, 0x5, 0x0) accept4$x25(r1, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@fixed={[], 0x12}, 0x0, 0x800, 0xa200, 0x3, 0x2, "15ed80ad42f195d7734987279b1dd6f44c421e8600f2adb4a73666e74f337cd1843ac0113e0da55d723f3c01b9d29aefbdce056160e4367de72f6b9a7361f8634220ceeefa655f62f7e2be82d52dfb3ab714470d0c3a163e4ee4652ef65fa92a942ac4a5e343151ee4976110bea39b526c4c7a84e9b754cb003ca07bfbdf5ad8"}) 04:10:30 executing program 0: r0 = socket(0x25, 0x0, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x54000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x5, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000240)="bfb058d40a88928280f73c56d1dec8859babbe006878ec808ef18f7496fa1d5784e6327b73fc8eeefad28e2f1fbf1e3526f634089af40a856b170f1f5c9ec778193e48075a3dbafc0fefb883420136918e2536c79ceee4ae1ff393bb235acdf42afe6323529624a3e284951ad12dc046e2479ee7f0440fd1fac6c0f88b58425592823b10337756d6c8ad0289bb210085e730faab423b40f873804103b6f0fdfb92353ee075cd9e3871381a8b5dd4f1d42002301425d584f27075595c3a77d190fe01025811ba14eb3a8425373124be0353ba9d494dcc8d1ce96182abe992581ea4861f", 0xe3, 0x4008805, &(0x7f0000000340)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) 04:10:30 executing program 4: r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x12, 0x40800) getsockname(r0, &(0x7f0000000380)=@pptp, &(0x7f0000000400)=0x80) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d7, 0x1f, 0x6, 0x0, 0x0}) accept4(0xffffffffffffffff, &(0x7f0000000700)=@phonet, &(0x7f0000000780)=0x80, 0x80800) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x1b, "6546b4", "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"}}, 0x110) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000140)={r3}) 04:10:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000140)=0x2c) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x7, 0x2400) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000200)={0x4c, 0x28, [0x100, 0xfffffffc, 0x81, 0x8, 0x6, 0x6, 0x1, 0x5, 0x6, 0x9]}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0xc6d9, 0xd9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r6}) r7 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x2, 0x1, 0xfb, 0x4, 0x0, 0x3, 0x8, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x9da2, 0x6}, 0x4804, 0x1, 0x9ebd, 0x8, 0x2, 0xe72b, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r4}) 04:10:30 executing program 0: r0 = socket(0x25, 0x0, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x9, 0x402) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8, 0x2) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x2, 0x200000) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000140)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000200)={0x0, 0x4, '\x00', 0xff, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x100) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080)) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000280), &(0x7f0000000240)=0xff29) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:30 executing program 2: read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/178, 0xb2) r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8400, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x3, 0x35, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) 04:10:30 executing program 0: r0 = socket(0x25, 0x0, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000200)=""/251) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x800000, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) 04:10:30 executing program 2: r0 = socket(0x28, 0x6, 0x20040) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000004c0)=0xe32) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r4, &(0x7f0000000500)={&(0x7f0000000580)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/125, 0x7d}, {&(0x7f0000000740)=""/69, 0x45}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/181, 0xb5}, {&(0x7f0000001880)=""/197, 0xc5}, {&(0x7f0000001980)=""/236, 0xec}], 0x7, &(0x7f0000001b00)=""/243, 0xf3}, 0x40002102) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000480)={0x7, 0x8, 0xfa00, {r3, 0x3}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000240)={0x15, 0x110, 0xfa00, {r5, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @local, 0x2}, @in={0x2, 0x4e20, @loopback}}}, 0x118) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/113, 0x71, 0x56348a578c8755ea, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x5ed, @empty, 0xa80f}}, 0x24) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000133edcfcff00ac5ba1f8851217b06a6c5bb46d695c41eca70c51111c3fa6493f958e1a3aa488572b7c9efb1b96", @ANYRES16=0x0, @ANYBLOB="10002abd7000fcdbdf25020000000800310001000000050029000000000005002e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0x58001) 04:10:30 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000040)={@fixed={[], 0x11}, 0x2, 0x800, 0x7, 0x52cf, 0x7ff, "6e7bd05ba59dedb4821430624e1bfb5a0c1e6dfa49827161602dfe6c3d47151586dbcd44c7341f4c5aaeec9541ef5934261235a8dbcfa80d42232016ba74245dc1ca67eb4a8e14c219c00d2ba9a4ee02d746e7f66be2fbc053b411f34b9dc5a16251ba9d93a78e243cf1eb29411593ccd2560e9f109ddb0a233bd2599b33eabe"}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:31 executing program 0: socket(0x25, 0x5, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:31 executing program 0: socket(0x25, 0x5, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3595.051866] Bluetooth: hci1 command 0x0401 tx timeout 04:10:31 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8400, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x3, 0x35, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r5}) 04:10:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000001, 0x246080) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) 04:10:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:31 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x58, 0x58, 0x6, 0x7f, 0x0, 0x11b, 0x40, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4, 0x200}, 0x41c00, 0x10001, 0x9, 0x5, 0x1, 0x400, 0x9429}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000200)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d7, 0x4000000, 0x40000006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r9}) 04:10:31 executing program 0: socket(0x25, 0x5, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x95, 0x1, 0x7, "e7417763f4ba6be65c1185b5c6a50bea817ce938567fd1ba13704d4bf5d05aba2c2f6d4d83ece1395dba8ad3d95e529a219a109d2714178c9a436fee4adc33e575b1340c09931a61c520a3d88e354ac426221f275ba7e13c24dfecf5eabf779ba68d298c2485da0239917992038af4eab07e675c47c85268f88067cec924c7c75f90e53c1fcbb1a41d1317f5eece8ac027141c2355"}) 04:10:31 executing program 2: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x1}, [@generic={0x1, 0x9, 0x7, 0x1, 0x7}, @map={0x18, 0x4}, @generic={0x81, 0x9, 0x4, 0x8, 0x6}, @alu={0x4, 0x0, 0xd, 0xa, 0x5, 0x8, 0x10}]}, &(0x7f0000000040)='syzkaller\x00', 0xe2, 0xea, &(0x7f0000000080)=""/234, 0x41000, 0x18, [], r0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x40, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x5, 0x2, 0x8}, 0x10}, 0x78) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2b, 0x1, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x44081) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:31 executing program 0 (fault-call:1 fault-nth:0): r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:31 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x0, 0x59d20000, 0x4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:31 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0xf6, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000040)={0x3d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x1000, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:31 executing program 5: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffbfffffffffff, 0x102) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:31 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x3, 0xc140) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x404100) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x202440) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x29, 0x408001) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xd4e, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) 04:10:32 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000180)=""/247, 0xf7}, 0x488a0285f5855a6b) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f00000002c0)={0x5, 0x81}) 04:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x400}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7729, 0x1f, 0xffffffff, 0x0, 0x0}) socketpair(0x2a, 0x4, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{@fixed}, {}, {@fixed}]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:32 executing program 2: r0 = socket(0x2b, 0x1, 0x0) accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80000) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 0: r0 = socket(0x2a, 0x4, 0x4) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5, 0x816000) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x35fb, 0x48202) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xf7) 04:10:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:32 executing program 0: r0 = socket(0x8, 0x5, 0x0) getsockname(r0, &(0x7f0000000000)=@ll, &(0x7f0000000080)=0x80) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0xc6d6, 0x21, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r5, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x19, 0x4, 0xffffffb6, 0x3, 0x804, r3, 0x80000001, [], r5, 0xffffffffffffffff, 0x4, 0x5}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) 04:10:32 executing program 2: r0 = socket(0x18, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7, 0x88000) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 04:10:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8001, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x1001f, 0xacf, 0x10001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r5}) 04:10:32 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x50d402) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) syz_init_net_socket$x25(0x9, 0x5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r3}}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r6}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @mcast2, 0x1}, {0xa, 0x4e22, 0x7, @mcast2, 0x83}, r6, 0x1ee}}, 0x48) 04:10:32 executing program 0: r0 = socket(0x11, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 2: r0 = socket(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x7, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:32 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000040)=[{0x8, 0x0, [0x8, 0x7, 0x203, 0xf323, 0x7, 0x100, 0x3, 0xffff1da2, 0xfde, 0x2, 0x4, 0x2, 0x7e29da10, 0x800, 0x3, 0x1000]}, {0x9, 0x0, [0x6, 0x4, 0x3, 0x400, 0x7ff, 0x7, 0x5, 0x1, 0xa7, 0x9, 0xf2, 0x3, 0x20, 0x101, 0x8001, 0x3]}, {0x0, 0x0, [0x4d5, 0xfffffffd, 0x81, 0x2, 0x8, 0x6, 0x10000, 0x2, 0x6, 0x5, 0x5, 0x4, 0x4, 0x80, 0x1, 0x1]}, {0x1, 0x0, [0x3ff, 0x6, 0x7e5, 0x7024c4e1, 0x6, 0x6, 0x9, 0x9, 0x100, 0x8001, 0x3, 0x6, 0x85f9, 0x1, 0x3, 0x3]}, {0x2, 0x0, [0x401, 0x3, 0x9, 0xfffffffa, 0x6, 0x7fffffff, 0x1, 0x2, 0x8, 0x7, 0x1665, 0x7, 0xffff, 0x3, 0x7, 0x4]}, {0x1d, 0x0, [0x0, 0x101, 0x2, 0x3, 0x2, 0x6, 0x9, 0x4, 0x0, 0x8, 0x9, 0x3, 0x7b, 0x32, 0x7, 0x5]}, {0x4, 0x0, [0x7, 0x0, 0x471, 0x1ff, 0x5, 0x8, 0x3, 0x7, 0x7fff, 0x8001, 0x2, 0xa6d9, 0x1, 0x5, 0xc926, 0x3]}, {0x10, 0x0, [0x50fa, 0x80000000, 0x66f, 0xef45, 0x3, 0x2, 0x0, 0x401, 0x1, 0x0, 0x7fffffff, 0x2, 0xffffff60, 0x20, 0x7, 0x1]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20) 04:10:32 executing program 2: r0 = socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendto$rxrpc(r0, &(0x7f0000000000)="c2fe1c21440bbdcab6d94773dacafeb254b3871a", 0x14, 0x8000, 0x0, 0x0) socket(0x21, 0xa, 0x3) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x400003ff, 0x401, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x68, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x48804) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:32 executing program 0: socket(0x2a, 0x5, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000000)) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xfffffffffffffe3c, 0x0, 0x0, 0x0) 04:10:32 executing program 2: r0 = socket(0x1, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0xffffffff) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:32 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = gettid() setpgid(0x0, r2) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000000c0)={r1}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r7}) 04:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x5, 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000300)) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f00000004c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000001c0)={0x81, 0x1000, 0x1}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3ff, 0x20441) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x400, 0x80000) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x3, &(0x7f0000000300)=[{@fixed}, {}, {}]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3596.881713] Bluetooth: hci0 command 0x0401 tx timeout 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x997c, 0x755080) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:33 executing program 2: r0 = socket(0x1a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x7, 0x20001) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0xff, 0xe0a80) ioctl$SG_SET_COMMAND_Q(r6, 0x2271, &(0x7f0000000140)=0xc1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d4, 0x8, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:33 executing program 0: r0 = socket(0x25, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000001580)=0x7) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000019c0)={0x1, 0x0, 'nMu', 0x6, 0x9}) r2 = syz_open_dev$sndctrl(&(0x7f00000015c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000001640)=""/142) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000001600)=0x2185f806) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000001540)) socket(0x36, 0x3, 0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000001980)={0x5, 0x10, 0xfa00, {&(0x7f0000001780), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000001500)={0x8, 0x4, 0xd0b0, 0x9, 'syz1\x00', 0x1f}) syz_read_part_table(0x200, 0xc, &(0x7f0000002bc0)=[{&(0x7f0000000040)="014813ea675388e3e2d2c09f2657f76b9a943060d8699fab67e6f1467e04128f0a0361bda0e3f6439a2906ba025aca93cffcc5c8e0c79abe97d8f01ec9be03f97bf8e14cb3637b21be1a9a2347843c4f1a858b920379687fb793495bb054b437c0b264197cc65ca8fc7b66d0e33acff1cc9f731dc41e556d90d90dc74d657021c2ab77d60e16eba1efeb0ed7ff6b226cbec31a921f865ca8d2f1f88c76dbe7cd6e8574c19e6ed36ff85c391239bc1e979e70141a3b8fbe71294ab4adf80caf1d41e0bd8af5631c44c1", 0xc9, 0x100000001}, {&(0x7f0000000140)="34e41c9b20193237f62ae0e3dd284b412e2fd9a9aedafd73d26e5ba17c4b33541cf5eb5cd0bec95dd44a3394bbb66c8bba2567ef84137d08919c2d36d9625ea475cbf3246af977fe97a48331af7e46d2b32d88006eed8c4eaa0307dceb8edf2bd28c6331ef0ede00999230dd8d308dfacea9", 0x72, 0x2}, {&(0x7f00000001c0)="a60259f040ea16fe2e0adf7660745e299ba6ce4e9f84c94a07ed5c70368bed26a823ee740a79518f9da170ae392ca0d03549c7425c53edff07d657357c296106724ceecb7e9f36", 0x47, 0x3}, {&(0x7f0000000240)="fff726d9d128e897a54a60128100dfad8dd723280727ff2d19917511a17881f3a7bea2571b7a56fd51f0c49faa7a4dd0daab360f1aafec9d520482d8cc4d4c75492d4f7a90a1b50dd6d61f71e2aee1ddb72ee9c42463d99f3e5eee3faaeda6f6c7edf0dff4ff507c50d2eeea4df1afcccd8d777ea2f0f44c3e0709e246a7db4a74b2c2c6c2a4fe48b31e57da58cac2cab18cf7c80a2d30231e544d1926cf5ca36a0b6873b5b89f45e9db04f2aff5d2b273c1cea1ffed829c48cea76583010910617ac0226722f188fe01658193c2593335fe50f39e39e833b52a22718c07d71c7c", 0xe1, 0x5}, {&(0x7f0000000340)="db0f2f8198b34863335bd38f135a", 0xe, 0x3ff}, {&(0x7f0000000380)="541a7fcf314fe746768082d6a0da098eef7c233eab1620436d22374dd97b01b873f6e98777dc3ee7b191330d3b6e4974fc5978a2dc270c46f5706fb4e3f4180b26dea1f89b803c719815291298c46e3c3784202dba9cfc5f792868f5a6ce8a80d2d544a5c4abf2d15f1400fd5d1219e50230d926acfe8c9dc1906a0d7ea8bf1af9817a86832dbf32d50ac9fd6dfe8a692b597b2328b0c5d7717c973af2fb71fdf9c0dc6ddaa6327871524e2ef6c801cccf76d9660aef00ecf462dec761c36dbe3086bdf5635db65a0e576d3597", 0xcd, 0x7}, {&(0x7f0000000480)="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", 0x1000, 0x7}, {&(0x7f0000001a00)="bec91a04bde7a1fb62a524e186a9368b36900af9fb859182ba0681faf49b9545ccda3b333900321c1d4db2922cafc5c35ee4a6e332f885290256b2a212ff38021dc29b339927309e7199a35fbc51a6079d709666fb3e56512f759cfad060cfc094861c9ffd9e2559c3", 0x69, 0x5}, {&(0x7f0000001a80)="32d6c7cfbe310ca7ca792255b429992f89e1ce1d65b42910141d160003e0d994ba18fe772cc0c99107b3aacc63ba6613d4cc23cab29fdd4494c8cdca11750c4d0eda7c85ad7fc3d372e3650d53eed198526d4837cb65379cdaf7c26c491fcc6015ac0439c19f0faeac8e28e600104bb53477d6dc732277c2f762358a129570ba9d9c1a820bfae311ef82a2d8184f82a0e3d5e2e44a4428518d7fc3a1562ffb372ad95744cf0b3878654a03b34184c47afd478cd107b845ce0fea33afca28c06f19377a86d0b79d173547effd4634f2db7316733dbcc52cf9b4de5b3a49ab99cf780ba940197b2633e38f8b91ba3c723b9313501afc28e8b22a71569ac5daeff40e85fd7fb0be28bb9aad41ffbb41450ee6468f8ae50471e60a9f523b4896630de0af8704df5878772f93883e5cf4973e18e856efbca14388b47954c25dca08902966a561b3a2adabdfe4c97d3c75cda2d9db051ad47f62eeb94790c6f497c3f736eafc464e85f7f43013e0004521454106b1c09c31f8cdbe13ae56d6d384aff64113479b74a8c7eaf61503e100a699091082339a6918207c32a8b69f2a1c72c8e5cf4311a4484b88f99c7489a584b5b77b6cda886de58ec5a00f4c350c045332c87321507b0469e5f6f8287270d8e16adab07dbae8526a5331b4e8d3cc400976129e083351e0f6bf04df1b9d65db15589892106728bb7789d90871113bf0c8a9cc9d0d4b9f8daba2b8ac6b4a365a1fbbcf49b93680e3da46094c406dae8105a4f38d2ac2826b2e733dbd42643b809880d07ce2212c10f6e910d2f3448f02fc34afae4e512e12f273fe517325232d8a9d164606a3ffd9fb71b27189bb5448a60079a1aac44ce0272c68db9d45f08dc74dd9050862fa77950b124714e3e01eb6ff5a0428ed5cfa89d572bd7bb990399884c365ddf93a52ec5bb2c3df15560cf4a8e38c07e01a2dec926097b60a8efcb5c5352e070f76dce5257fbb08bda972e5ca637fa59c277d933a54c9f54d4658b988a99e4f9572f2c761482b833b07e0927e07f53388b4cb6459d6d38c01234fe0ed4bf58353777931843ec88072cd60133f31f0d6df726134dcd3ddbcb296ff6bc6f0586e1404e55cba8dec5b3672f6ca39f349d089ee1efb0f8ef84a87a2a05c79ba66cae688af65e35299f88c10d450108c7abcfc9d5344da799b63ad81023e8f48ffc94a7916c41de454eb38001221982214c6b6612894961ff37045fd9a578c47082b90c8bdc732ccbb17e5db539ba7fc600ae7ba73eec49e9a8570d8775dcee7b0f4e48ea0833d4ec680d98398cac2ea68c6919ce8fecc3f7c411b8a24aecd83e8a7dc607c1ca5daf15daaa252f4ebb0327555946dd015385fbb4edfefb4eb7c241bd694f43ba6e9aa9fc9d2f54efb9bf139c43d39dcbd764b0c83e1a1eaa2003a8f9ca1d54896028c73b71e9618c6bc8f06279bc3022a20b25126f682178eab0c7844c40027d5eb2012c9b6ea31333912a8e9196dca52b3b65fcc0e5461a4ea7003b8dc58712cc476cc16c7ab176f18c29a1cc77f6e69c26d375d68252ce8a29ce1e5b814dc1de2ebad9e9e4aab0a2c554b69d825b97dc9509f229220cdf0e2db4b47993b6f9de35f611ec6023e4a1a71caaefbf73105ef0e1f526674d46b23df8236f8b05cff9791df1473d4ab0c7d360222f68113818ec1eca3060d35e109f10cc66a9859b03ec93895643024276e2eadf3bc87a9848178374d38699fcdf0b89470cd2a79e35c4d439c6c95ee0eefa41177d11dcaad64656330036b79126079ea74162a958f805660638fd549cd2f081ba9ca8d68a92eb89701b3d35b4ef5c49f7d0481e881e62970fb98dc4d7b0e51a8a0c1583b7b9ee16d58217072dbd188a71adce0cf127d36f167ada1d2689a1df9b88440b248005078ef66a79863649b161296f903ad3143df04bd7b645ed9787b5346edf0b0fa9f9d439e09109b629a694f4e35df476a258612195c5ac03ab3653965944bfd952de604bf237bf8b1e458535d60da839ee79a2f27b68460e5e0dc1f893c8ad69afa3f6117b163f30c46817c39bb9ff7d57afaecb627a658f5d0a76deffe2e78a3ae0f352fbcbd6b3099be76b184b9763f995e12a1d3119b2efba04ee3bbef187de1bd1c13ca63d6bfe488a017555b1874e53ee6c9cd2d647a270a875c14f6d50cc272eb873ea3cdb6d7e47b26e633439a8c633953a7bf0c806a1933ebd49621e1a2774fea4cc7c9a02a283c95fdfe25253eab404e706c0ecc0b4de554b99d465e8ab9d2099744d2a329ba9a8ecdd7b5d5730896867f6e55f26bc2b1d59824245f8369d687d50a106a52bd40546dc2dcd00d68542dcf3d49ad0a8482bd188792fdcaf295667a0144313d6c4191d7c10f746244adafd69293bb4c001fd2ccca9cf1d5450255539f27fcc7c6943366596dc14899ddabc2bc904858b059a1f3396848759d8c0c84188934401741a95e9c11d805cdd5376d07d7ddfb48ba6de289a9845febc487753f347bb03198ff40bb86aa5cf631f0bfd7e10dc1077f212bd6eada608844f4ffaf375586ee751fb6c4349e4457d61bab6611fb63cba103d06bb5bbd1d99ba2f374b0c414dae75e64b8f36f253fe4e4d95bb76eb1a1fa5a5faa638a896faeabc883cd87b780640fea491d9cbfed49a8526573dabfd38527f676056d6c75bb69e2cd631a91e8c632be190a4dd07e01b2d451186212f27e9990e861bd3e668ac59faa0fd2552561628c2b05c9ee319f3638e39b622af6f082431fc160ec52ab554839f72fd15e9719d579fbe0d1da037ebab279a0781b0c812416540d5f8b37e7bb5d1e2bb2a7fe8f803aa48dce87b6e96644523c997a7cd6f55c323fbe098cf9b366b8bc354ea51b486627911f8f127b0bd5251557cfbbd489165681e9bd0de254b3e3278e3d403bc022ac65d44c3f6c9b57a407fdf4dd744d2f68e3ae798793d91797abb9d97c25bd46aa4e19e47a6fb38fa2ab6463bea34d7d35d52c4153ae48b01a9bf752b94fb5771f48c870387cd92dfdf4923edd7806bf55e00eaa75884b1f1b4abf3bfa6b5b391191d1a6c96329ee4dcd33c5d49bc9e0fbadc51f694e7a9ef1428a4f877c97b50e9f687eb4fb31ae771a1f3a7a1a00d38a9083c13a377a0a87c51dc484bd5af8f4356883d82ac49e2c62f283342f3dfad97e49a861d888cb1ccb5db96f7a4400e66276b3b90725050b29af3565171713376e8063ed31eaab7690a8db0b549804d094836cb9638c472204bd552072e5e458fdd622e4661b33d1ecdbec03212ef7d79e1bc769d09fe4fc3bd7e8de3475296b21026159c384258ce51e3f9d3c105f086db083b1f59ab0f492f374475faf66cb0a39de6bf0aee80a53dcfc62fe5ed42792cb5e32128529bddca27673e5269f517fd10d65372b108384e2085d943d3b5e9937e5c620ee5d1b7f15603ecad710f4e26b6c48bcd7d9b262a81b243953bc4f20edaa0442aa310da3e485a9e627fa3f970f17297c7eff352e9a834a65631e6f497dcc698d9ceee54698a2ec7a34606661aa24edbaf727b8be4bb9b6f2494847a9fd4b5b3629a12d2fbddc52ff63a5be24c8017959b234d7604f1097f2421cdc269f1f9a2515860da086995e4f735965bde62ec2029d8377f463546ef6ebe1c429d7d9a19e1894d34a07e86d27388304362a52af242ebd10afe3d6775f6e19b739a8b84ac008d661255f9b169398439ec7763d7d655c526d2ae0998f8fc5d6f7eb994c5a77c5d4fe612298d1ec14b4551050d94187c669514b19e3b23407d30526cc1079008fd0178079c07cabc3a51f0c12bf789f388509d4599286fb11825e0ec7e6dcfc4b7a8417c567be72b689917c6140594df2c4cc04f59ed45f5e46430807479303aa7cf3c86c78fc5024b8fe7ef4f254b5adb838a481920e47b445f13707738716a945f5ec831f5480d244f50dc96699d5d41be4b87e4458eab5714527a37cfcab07294ff79bca2b98c5cdad5fe7da5714309c4b2b640b56b848688ecd40bf5887a0c9e569779783acf0c55f0ed239b22a69355f30037762b2271fe57aeae35ad42939e7bfe448ed8e72a687379d95ea356b7e660a016befae9769d722332fa009ad7e572a80010b74741ed4ce0e7db375aa97c0da4d25baffe3ec5270d8b9aae06cc3a52934f817275e73f4078726d3fe261cb536c017fd8d0acc13d090c4b412502d18fc48a0f13562dc8c98ec33d68ae555cd601428651c46dd1b5dda9453de76afa16f7a6983faffb0c614156c7fbf132d01d6d0ca0c398c82523563bb134312c8374e05c05de558a9285da450305fef5ca79e07a858a83c2164e2b7cea94306e2bec93d282b7fe5f409543fccf97baa3d57e97ae52f8eb634162a2c5167f30216e3e3cd51868b18afc939f22d7a50af598731222e8acdf4386e5d592d6fdccb97641d0d5576c557e643ad7b643c0c08019a37d07c3a30ab4fcc275737bbffbb791eeda35fba6307fc26be51f6313d8c2472ba7eeff7f7553948aca7af1ccc097ee1c8c2bb4cf283e8237cc387ded89e7c7288ffab57864115ac9dbfd2e6dbd4874115d1d6aa96d0a993890d0d2a1165bd58f896d830b70c5ac825e447ab9c5fe4b7f0f9e5147ad09cee6c371b1b1948c8fbba532d9d8bce04d693248f6d0f8f2bad7a974d75cfdfab8f65f5db5a4cc81b9d91e18bbb6f67b6b7ef44804d7cda73736d05c51a0e32ce9dc623101b9b08d3e6b368118889c628fd119cd2cfa3f89e05c46277365347b4b20b1d800614ab3bba6476db993ad00ae7d1ac7a432395a5460b5077ae5c11ea4538c4f30244f7b04fe36266402c379d0ee62a780f443657f83501fb1400fd58afb301ae4ceb9b06a483f8fa1803cc96ca677daa7dd207728dea52029be8bcb5471ae55ad9850169afe53f246d741168630d5f1e5b0811853c56d1ed3aca2cc84d4a33aa07525a3b924380c18441ffa8ccc6b9ae16d78fbce7d8faa14ca4d5e028d6a398bc56331fbe0415b3e5f766220cc626e1fb87dcedf12fb36a54fcfec20b5db9f88d932b44616e9194da809c", 0xdf6, 0x2}, {&(0x7f0000002a80)="f6947537f32e9eaeb0daf4c97d2a53f6f63637432a4b1050aad4500a065fada1eabccca724ea8ad58eae8153a14cd509a0e0468ffd6c254c761701e3b6769d986dda59308056666fed04a0fe84da83ea852889e0ccf76d4e60a63e0cff8f1b", 0x5f, 0x3ff}, {&(0x7f0000002b00)="7b40b4f62ea4a0e6949766fdb555e9206d86cdab1c50398931d1a9b26698e5cd5de1119b135b6b68fee6d320255b31157c08350e5f9d4fa426885a100b9bcd15c04d9e47b2b85747646a45cb53bfe3cff8557708a0036355b7ef634c3b62effe75fcef93b1412fc2a5b15bf51ddcc3b3e3d0a1b6ecf287f2c622", 0x7a, 0x8}, {&(0x7f0000001480)="06a639f2fc7f6ac67fc7600562ccb73f35df90f3330de722099b190d1778dc4c7854fcfbef164e0378831ffabfa6c8e453151956bc51b914", 0x38, 0x7}]) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 5: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000480)}}, 0x18) ptrace$peeksig(0x4209, 0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x0, 0x8}, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}]) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x501002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000080)={r6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x7ffe, 0x7, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x480000, 0x10000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000100)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x107080) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x12000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x101, 0x511001) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) 04:10:33 executing program 2: ptrace$cont(0x20, 0x0, 0x5, 0x1c) r0 = getpgrp(0xffffffffffffffff) setpgid(r0, r0) getpgid(r0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000300)) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000000)) getpgrp(r0) getpgid(r0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0xffffffd2, 0x1, 0x0, 0x0) 04:10:33 executing program 0: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0xffffffc0, 0x5}) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000200)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000100)={0x5, 0xc, [0x2, 0x8, 0x9]}) r3 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000180)) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) getsockname(r2, &(0x7f0000000040)=@phonet, &(0x7f00000000c0)=0x80) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000001c0)) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8f17, 0x240000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 04:10:33 executing program 2: socket(0x2b, 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000140)=@buf={0x1000, &(0x7f0000000540)="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"}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000001c0)={0x510, 0x8, 0xa6a8}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:33 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0xff, 0x3f, 0x16, 0x54, 0x0, 0x1000, 0x314dfc099c0a7f4, 0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x2, 0x6d000}, 0x2, 0x2, 0x0, 0x8, 0x8, 0x1000, 0xff}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xe, 0x20010, r5, 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x1c06, @local, 0x5}}, 0x24) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x61d4f859, 0x40000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 0: r0 = socket(0x22, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000040)='\x00\x00)\x14\x9d\xdd\xdd\xe4\xb8\x00\x00', 0x13) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000200)={@fixed={[], 0x11}, 0xfffffff8, 0x0, 0x2, 0x2, 0x5, "257738302106953418191b4d6f453ac52c8cf8aa266b805ff6f7eaec1d0e02aa8f8dd343d80ca11b126f1f51f5acf6c09a433533a2b91e223bf303b439c3f57d46a7653dc844b9eb243e63f3a91f14eaeed95f7211901058ed08709bdd8c6eb32e301de46b50ec6c32e1e7531e34c69710c09213b5c36d51b51acb24db074ede"}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000080)) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r2, 0x0, 0x0, 0x2, 0x0, 0x0) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x1, @local, 0x5}}, 0x24) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x62000) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f0000000080)) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x125102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:33 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x2100, 0x0, 0xfd9b) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x410001) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:33 executing program 2: r0 = socket(0x26, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000300)=@buf) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x501100) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x107, 0x2002) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x2, 0x200080) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x80001006, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000000c0)={r7}) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0xfffffffffffffff8, 0x440000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:33 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/188, 0xbc, 0x10000, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x102) accept4(0xffffffffffffffff, &(0x7f0000000080)=@xdp, &(0x7f0000000000)=0x80, 0x80800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffc, 0x60800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:33 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 04:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x10008000, 0x4, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffff7ffffffff, 0x342) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:33 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0xaa, &(0x7f0000000000)="bf22a977e05ec14620a43181e2e1609548849df767fca7c25664fe9d05ba673993a27c7820f57f1899c3059c750e01e19067f4bcd482adadeff90b1410394ce4d28c6873b6aedeeadf59e773f086c2d4eb95c0ba53b65800a0b85b77b019c16b5e8ba5c18c706ff79e60dc9f1694f4d4b80b119c9fb302367951b02c309bec92014e384a8b97216d314f435b0d8d6c6fb7191e3f68e1fe948fb76bfe880807c0fbc1232c94cdba4517d5"}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:33 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r2}) 04:10:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x6341) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000080)) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:33 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000040)) 04:10:34 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = accept4$x25(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote={[], 0x3}, 0x7, 'ip_vti0\x00'}) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000240)) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r4, &(0x7f0000000080)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) socketpair(0x27, 0x800, 0x7, &(0x7f00000002c0)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x101, @mcast2, 0x8000}}, 0x24) 04:10:34 executing program 2: ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r0 = socket(0x5, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000002600)=@req={0x28, &(0x7f00000025c0)={'netdevsim0\x00', @ifru_data=&(0x7f0000002580)="037b827194be308ea61646dd0a877804fb6749b717ddaf67ac83f7db3868e289"}}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x80) socket$rxrpc(0x21, 0x2, 0x2) 04:10:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x400000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0x53, 0x0, 0x3, "64315b17759dd3fe231266d33c3a57f44d85fa6c9b2d263de015593274785f8bf4ad32e0d06240a053335b97bf89d7237bbe5e2a02fd435fd8d3d48e751c03815ca34b832ed5577b6ab187fbb1fdb018ba2701"}) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x731742) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) 04:10:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100000000, 0x26201) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x7ff, 0x140) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000001c0)) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x7f, 0x40400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x930f, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:34 executing program 0: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x9) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x20, "e38ece", 0x0, 0x18}) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) 04:10:34 executing program 3: syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = gettid() ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x600, 0xfffffe00, 0x1}) waitid(0x2, r3, &(0x7f0000000040), 0x40000000, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) tkill(r3, 0x37) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x800, 0x68000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x384c40fa, 0xd8102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x401) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:34 executing program 2: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/119, 0x77}, {&(0x7f0000001100)=""/199, 0xc7}, {&(0x7f0000001200)=""/231, 0xe7}, {&(0x7f0000001300)=""/203, 0xcb}, {&(0x7f0000001400)=""/64, 0x40}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x7, &(0x7f00000024c0)=""/153, 0x99}, 0x20) sendto$rxrpc(r0, &(0x7f00000025c0)="5833d5ece343ba90bd563c8c26ec7690cfe12a3669bc74f8a88d32d212b8e0cbef3ba8df63f48f0a2abbf8fad1726457d705c094b0971fba8a51df1514", 0x3d, 0x800, &(0x7f0000002600)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x80000001, @private0={0xfc, 0x0, [], 0x1}, 0x28}}, 0x24) syz_open_dev$dri(&(0x7f0000002640)='/dev/dri/card#\x00', 0x2, 0x1c100) r1 = socket(0x5, 0x80000, 0x1) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000002680)='/dev/sg#\x00', 0x1, 0x206000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) 04:10:34 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = socket(0x25, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000000200)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x0, 0x5, "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", 0x76, 0x1f, 0x81, 0x3, 0x0, 0x9, 0x4, 0x1}}}, 0x120) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f00000001c0)={0x4, 0xc, [0x3, 0x9, 0x6]}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f00000004c0)={0x9, 0xa, &(0x7f00000003c0)=[0x200, 0xed, 0x3, 0x2, 0xc7a, 0x8, 0x4, 0x4, 0x6, 0x9], &(0x7f0000000400)=[0x40, 0x7ff, 0x7f, 0x1000, 0x5, 0x4, 0xbe61], &(0x7f0000000440)=[0x7fff, 0x7, 0x8], &(0x7f0000000480)=[0x4, 0x4, 0x0, 0x4, 0x2, 0xfff9, 0xfff]}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000140)) recvfrom$rxrpc(r3, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffff9, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000200)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3ff, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}, @ib={0x1b, 0x0, 0xbd, {"8fd779553a13bc93660354e6191ee0ae"}, 0x1, 0xffff, 0xbd}}}, 0x118) 04:10:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x101002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r4}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 04:10:34 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={@fixed={[], 0x12}, 0x10001, 0x1, 0xa2f, 0x1, 0x8001, "c22dd5926ee3caec008d695be4c4137ca966c3d053a11e01f1c36aae499649abae7ced96e4202eb999d5b3697a00c7e5af3cabfd21ccf4c3544cb7baf895a622b3036589c1c2c92ad5be2002feda46e44e3ef52bc9ca5af77b2f009afad116523090dea0511b0d46591fceb2eb5baa52da1c2018b77eee79c30e0bf11f04cf91"}) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040), r2, 0x0, 0x0, 0x1}}, 0x20) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:34 executing program 2: r0 = socket(0x37, 0x4, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10}, 0x18) 04:10:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000080)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x2, 0x0, [0x0, 0x3ff, 0x7, 0xc80, 0x55, 0x26c000, 0x10000, 0x3, 0x6, 0x5856, 0x0, 0x4, 0x8000, 0x0, 0x8, 0x9]}, {0x5, 0x0, [0x7f, 0x401, 0x6, 0x7fff, 0x80000001, 0x2, 0x6189624d, 0x7, 0x3, 0x8, 0x1000, 0x7f0000, 0xa5, 0x5, 0x2, 0xfffffeff]}, {0x5, 0x0, [0x7fff, 0x80, 0xff, 0x3, 0x1f, 0x7, 0x5, 0xa3, 0x1, 0x7fff, 0x5, 0x8, 0x6, 0x80, 0xcc, 0xfbd]}, {0x19, 0x0, [0x5, 0x3, 0x2, 0xfffffffc, 0x7ff, 0xffffffbe, 0x8001, 0x2, 0x3, 0x7fffffff, 0x8, 0x6, 0x7f, 0x401, 0x6, 0xb]}], r4, 0x1, 0x1, 0x120}}, 0x20) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) 04:10:34 executing program 4: r0 = getpgrp(0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) ptrace$cont(0x20, r1, 0xfffffffffffffffb, 0x5) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x8000000000000000, 0x200002) syz_open_procfs$userns(r0, &(0x7f0000000000)='ns/user\x00') r3 = getpgid(r0) sched_getattr(r3, &(0x7f00000000c0)={0x38}, 0x38, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000040)) 04:10:34 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x2b, 0x80, 0x1, "53760cdcc1b4e09c80f32b507c80e0af2f25c446f9ae31d228e2d2b347e4a91d5d42b1a2eab6e8de011461"}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff8001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) 04:10:34 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @xdp={0x2c, 0x8}, @phonet={0x23, 0x9, 0x3, 0x3}, @ethernet={0x1, @local}, 0x8, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)='bridge_slave_0\x00', 0x101, 0x1, 0x401}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:35 executing program 2: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x401, 0xc8a193972fc7ff7e) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:35 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:10:35 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002340)=[{&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/239, 0xef}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/176, 0xb0}, {&(0x7f00000022c0)=""/79, 0x4f}], 0x6}, 0x40) 04:10:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8d}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004001) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf250300000008000300", @ANYRES32=0x0, @ANYBLOB="9bfdf32e08000b0000000000d3dc08"], 0x1c}, 0x1, 0x0, 0x0, 0x8400}, 0x20040004) r6 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, 0x0) 04:10:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0xc0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x2, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000000c0)={r5}) 04:10:35 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2040000000000, 0x10b103) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xed05, 0x400000) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) syz_open_dev$sg(&(0x7f0000000380)='/dev/sg#\x00', 0x9, 0x2100) r2 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x9, 0x40000) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000280)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000002c0)) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000300)) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000400)) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000, 0x80) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x31aa) ioctl$SCSI_IOCTL_DOORLOCK(r5, 0x5380) 04:10:35 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x11, &(0x7f00000001c0)="acccd0447e32065d140d8d0af0efe07ea3"}) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 04:10:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0xfffffffffffff308, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000180)=0x5) r5 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x400000) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f00000000c0)=0x1f) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) 04:10:35 executing program 0: r0 = socket(0x25, 0x5, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:35 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd2, 0xe1991a04ac722b4f) 04:10:35 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1b, 0xe, &(0x7f0000000280)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ldst={0x3, 0x3, 0x1, 0x9, 0x9, 0x8}, @jmp={0x5, 0x1, 0xd, 0x5, 0x1, 0x30, 0x8}, @alu={0x4, 0x1, 0x6, 0x6, 0xa, 0xfffffffffffffff0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x0, 0x0, 0x5, 0x18}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xd, 0x8, 0xb, 0xfffffffffffffffc, 0x10}, @map={0x18, 0x7, 0x1, 0x0, 0x1}, @map={0x18, 0xb}], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x2e, &(0x7f0000000300)=""/46, 0x40f00, 0x18, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xd, 0x8001, 0x1}, 0x10, 0x0, r0}, 0x78) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400d88}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x30015040) r2 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@sco={0x1f, @fixed}, &(0x7f0000000240)=0x80, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0x31e}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x81, 0xa, 0x4, 0x800, 0x3, {}, {0x3, 0x0, 0x1, 0x5, 0x61, 0x0, "7b020cdb"}, 0xde6, 0x1, @fd, 0x4, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x8, 0x0, 0x4, 0x8, 0x4, {0x77359400}, {0x3, 0x1, 0x9, 0x81, 0x1, 0x5e, 'Agf\\'}, 0xfffffff8, 0x1, @planes=&(0x7f00000000c0)={0x87a, 0x1, @mem_offset=0x4, 0x2}, 0xd86, 0x0, r5}) 04:10:35 executing program 2: r0 = socket(0x2b, 0x80000, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/181, 0xb5}, {&(0x7f0000000180)=""/164, 0xa4}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000400)=""/127, 0x7f}, {&(0x7f00000004c0)=""/151, 0x97}, {&(0x7f0000000580)=""/7, 0x7}], 0x7, &(0x7f0000000640)=""/32, 0x20}, 0x40002001) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) accept4(r2, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x800) 04:10:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x646d80) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:35 executing program 0: ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000000)=0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x35, 0x4, 0x8, "ac46d23c8bc82d05b45930015064246ed086f2a1fef573cd3107a599da7a5f5180e813eda1800895b94c12cc70f2050a8da700c9d7"}) r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0xffffffff, 0x2000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000200)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r1 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xa2, 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000040)="fe87ceaa8f61683930044ed7cff94e8ffd8c4a2bcd4f2841e8ca6ee562530df66581d0d49f71ff0e10a64c7cf5cd12edcf05ab6d50034ab936f47bee6d0807d938bfb93212568df7156a766711940096830d4530961b4ab6ed644d67e0e3e0fc605bcb6baaa76351a0d154bf7b408a4980a6ca03f7309e7d9f239d001602cad8a4d3bb90d6", 0x85, 0x48001, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x2, @empty, 0x7}}, 0x24) 04:10:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x260000) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000140)) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9, 0x80080) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000100)) 04:10:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x400700) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = accept4(0xffffffffffffffff, &(0x7f0000001540)=@rc={0x1f, @fixed}, &(0x7f00000015c0)=0x80, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000001600)={0x20}) 04:10:36 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf250c00000008002c00000000000500350025ac3b1c0a000900aaaaaaaaaabb0000"], 0x30}, 0x1, 0x0, 0x0, 0x4c015}, 0xc0080) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'veth0_to_batadv\x00', @ifru_mtu}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @hci={0x1f, 0xffffffffffffffff, 0x2}, @ax25={0x3, @null}, @vsock={0x28, 0x0, 0x2710, @local}, 0x3, 0x0, 0x0, 0x0, 0x900, 0x0, 0x200, 0x5, 0x100}) 04:10:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x10001f, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000100)={0x101, 0x10, [0x8, 0x9, 0x5, 0x401]}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f00000000c0)={r3}) 04:10:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/6) 04:10:36 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000000)=[0x0, 0x2], 0x2) 04:10:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x880, 0x10140) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:36 executing program 2: r0 = socket(0x0, 0x5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000240)={0x9, 0x108, 0xfa00, {r1, 0x91, "5e1f36", "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"}}, 0x110) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000140)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000f7dbdf250600000005002e0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x31, &(0x7f0000000000)="a32b60907ed45a5412e03e502a993c5162ddc8d8365d836272e57f3dc13b498ae308ca5a14c49c1aedd7949ad1fe5a6eb3"}) 04:10:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000040)={r1}) 04:10:36 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x22, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 04:10:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xab0, 0x185982) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:36 executing program 5: write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000080)}}, 0x18) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = socket(0xf, 0x800, 0xd90) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='/dev/sg#\x00', 0x9) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1ff, 0x521000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x0, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f00000000c0)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd428, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffd, 0x181041) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d4, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) 04:10:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) socket(0x1e, 0xa, 0x5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0xcf, 0x100, 0x9b, "2ed14fa27fc221d2e8d74c5c3402a27ca444c75769652bbf7c780a65556f52bfe2e7b032c64cfa3655b85cd28723e0836e85545f9ed0fbeeaab7e4cd059beebf3f143e2df148898740c2ceab45502484c4b2962b7c6e4a563448565f94d20e17dfaa3f2970e815e9c8d01466ce275fcdff46c23c41311698a540e31774f75d9d0874fd8f21b88d662a5d520e0f6d31016cba9de0a01371905fe682da8df5bcc048b3755fa2e6e816df475abcec9dfb7b3665f59f98deed099ea91b5c198af6627739d2768bf936a9f22664651ab32b"}) 04:10:36 executing program 0: socket(0x25, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r0, 0x0, 0x0, 0x63, 0x0, 0x0) 04:10:36 executing program 2: r0 = socket(0x2b, 0x1, 0x400) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0xfffffff9}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:36 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) 04:10:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x40102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) 04:10:36 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket(0x23, 0x4, 0xc0ec) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000e40)={0x6, &(0x7f0000000ac0)=[{@fixed}, {@fixed}, {}, {@none}, {@fixed}, {}]}) socket$packet(0x11, 0x3, 0x300) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/121, 0x79}, {&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/129, 0x81}, {&(0x7f0000000280)=""/183, 0xb7}, {&(0x7f0000000340)=""/124, 0x7c}], 0x5, &(0x7f0000000440)=""/27, 0x1b}, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 04:10:36 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000200)={0x5, 0x0, 0x3}) 04:10:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x240500) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 04:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x6}, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0xb, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x24, 0x42a040) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000180)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xbb, 0xffffffff, 0x6, "2ac2d3c82454e78b9fcf04f22f1c3fb1a260bfbaaa0d6655166d8089ad5a26433e5bf34245970bf5b786e43cbb18cc0f42be729ab092d40be1eb7d60a35f4f013f3a3b49fe34904d993b41f8e3efce4d67480984392ade9f277e0687caaa27b4c8af2e97b6b2fa658ae64f9df4a2caae47ca98a9111c4dbabc5edafab5b91ac6654631b38a67d3766017ff83e08061828c1f7de4f6b5423de617e347f0898c04ead99e23053e95e14857816c3a6fb41efa0c77d38dac0fa49479bb"}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:37 executing program 2: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000000)) r0 = socket(0x2, 0x2, 0x10000) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000040)=""/179, 0xb3, 0x2000, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x1, 0x527841) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000200)) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r3, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x2, @empty, 0x48}}, 0x24) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000100)=0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/500]) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000140)) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x7d, 0x80, 0x71}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) [ 3600.959177] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3600.996833] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:37 executing program 0: ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e21, @private=0xa010102}, @l2={0x1f, 0x0, @none, 0x5000, 0x1}, @ax25={0x3, @bcast, 0x4}, 0x1f, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='netdevsim0\x00', 0x101, 0x6, 0x8}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000040)) 04:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1, 0x8, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 04:10:37 executing program 5: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f00000000c0)='/dev/vim2m\x00', 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000300)={0xb, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x5b}}, 0x18) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x2, 0x200, 0xff, 0x4000}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x8}) read$char_usb(0xffffffffffffffff, &(0x7f0000000140)=""/226, 0xe2) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x3, 0x5, 0x8}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000100)={@hyper}) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x400040) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x440380) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) socket$rxrpc(0x21, 0x2, 0x2) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xfffffffffffffffc, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xff, 0x101000) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={@fixed={[], 0x11}, 0xff, 0x0, 0x5, 0x1, 0x2, "3ba82b96e9f3135aaee0a41b8dca8fc56a21afb107f6ffe167e027f365404f98b6c2b628442fcee8b33a10a82b4ffc922e4844375537734052ddc9f0b1aa368bc9d6a34d58de17c0509f6610c33531c03541f7301fc3297626eb3315c5ac6ba8af4f8da70227cfdf10c3b843be605d2f976b052f857dcf55daeaee0bb6aaf6e0"}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @loopback, 0x8}}, 0x24) 04:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x1, 0x4, 0x4, 0x0, 0x1ff, {0x0, 0x2710}, {0x3, 0xc, 0x6, 0x80, 0xef, 0x37, "2aa01031"}, 0x9, 0x3, @planes=&(0x7f0000000100)={0xf85, 0x9, @userptr=0x8, 0xd5}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8000000000000000, 0x400000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x2000, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x118) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[]) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x400, 0x120c1) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000140)) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f00000000c0)) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000040)) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:37 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'veth1_to_bridge\x00', @ifru_addrs=@phonet}}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x9}, 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000140)=0x1, 0x4) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000040)={0x0, @hci, @ethernet={0x0, @local}, @in={0x2, 0x0, @local}}) socketpair(0xb, 0x5, 0x6, &(0x7f0000000280)) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @l2={0x1f, 0xffff, @none, 0x7, 0x1}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, @ethernet={0x6, @remote}, 0x6, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='xfrm0\x00', 0xfffffffffffffffa, 0x2, 0x9}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x2}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1, 0x100}) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfe}, 0x14}}, 0x40004) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r3, 0x110, 0x5, &(0x7f0000000100)=[0x2, 0x4], 0x2) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x1, 0x40800) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) 04:10:37 executing program 5: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 04:10:37 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @ipx={0x4, 0x1000, 0x7, "33459362994e", 0x6}, @can, @in={0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='veth0_to_team\x00', 0xdb, 0x6, 0x6}) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) write$fb(r1, 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000300)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000480)={0x10, 0x30, 0xfa00, {&(0x7f0000000440)={0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x9, @empty, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000004c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000400), r5}}, 0x18) r6 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2={0x1f, 0x0, @none}, &(0x7f0000000140)=0x80, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', 0xffffffffffffffff) getsockname(r6, &(0x7f0000000540)=@ethernet={0x0, @link_local}, &(0x7f00000005c0)=0x80) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="34f3ff00", @ANYRES16=r7, @ANYBLOB="00022cbd7000fbdbdf25030000000600280003000000050033000000000008000b009500000005002d0001000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40005) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r8}) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7fffffff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x14}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d0}, 0x20000004) 04:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x3, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0xa0, 0x1, 0x40, 0x6, 0x9, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0xb) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f00000001c0)=""/77) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x73e, 0xe000, "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", 0x1f, 0x7f, 0x9, 0xd8, 0x80, 0xe6, 0xfb}}}, 0x120) 04:10:37 executing program 4: syz_open_procfs$userns(0x0, &(0x7f0000000040)='ns/user\x00') r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x880) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000080)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, [], 0x1}, 0x3ff}, r2}}, 0x38) 04:10:37 executing program 2: r0 = socket(0x2b, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) accept4$x25(r0, 0x0, &(0x7f0000000040), 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, &(0x7f0000002580)=""/4096, 0x1000, 0x12020, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 04:10:37 executing program 0: socketpair(0x9, 0x800, 0x101, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x44}}, 0x0) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/53) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000180)) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x41c0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x3, 0x1f, 0xc75923a9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x201, &(0x7f0000000080)={&(0x7f0000000040)=""/20, 0x14}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x9, 0x280) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x22, 0x28800) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x200c6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:37 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000001c0)={@any, 0x8, 0x5, 0xfc01, 0x0, 0x0, "f427d9acd111812ea7cad1e51681fc1aa8e02de572b8609aabed839c45f8d6ccc95856e9468081f91b272e1a5eebe2d5b4d38d03132e2a571f23dd893452a4ed06149be2a8f67f2e1ba34a8ecd42096cf2e7e756f25ef937b0fd9c230561c54d9824004606aa8c5f5a5bca32a9e563e6ac63b8ce072af1d07402dff90da95a4a"}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000300)=[0x3], 0x2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000003c0)={0x0, 0x92, 0x100}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) getsockname(r7, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000380)=0xffffffd3) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', r6) r8 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xffffffffffffff1c, 0x80000) r9 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3, 0x6002) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000280)={0xff, 0x5, 0x3}) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x7, 0x0, 0x40000}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0), 0x1) 04:10:37 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x102, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x3ff) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)=0xffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:37 executing program 2: r0 = socket(0x11, 0x800, 0x20) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0xc0e80, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000080)) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='$/\x00', 0x3) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(r1, 0x0, &(0x7f0000000000), 0x800) 04:10:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x200900) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000080)=0x3) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) 04:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x240, 0xe23, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r4, 0xc01064b3, &(0x7f0000000200)={r5}) r6 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xb, 0x20200) ioctl$SG_GET_SCSI_ID(r6, 0x2276, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:37 executing program 2: r0 = socket(0x29, 0x1, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x400, 0x77c7, {0x0, 0x2710}, {0x3, 0x0, 0x7, 0x8, 0x9, 0x1b, "d45b28fa"}, 0x81, 0x1, @userptr=0x3, 0x1, 0x0, r2}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x6, 'syz1\x00', 0x9}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:37 executing program 5: write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x54, 0x1, "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", 0x7f, 0x8c, 0x50, 0x40, 0x9, 0x3, 0x81, 0x1}}}, 0x120) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)=0x1) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) 04:10:37 executing program 1: recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000540)=""/4096, 0x1000, 0x40000000, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r4, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', r4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) socketpair(0xf, 0x5, 0xfffffc00, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x100, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000240)={0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x9, 0x113101) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000005c0)) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x100, 0xa081) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r5}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x1, 0x7, &(0x7f0000000280)=[0x40, 0xff81, 0x7fff, 0xa6, 0xe7, 0x7, 0x1004], &(0x7f00000002c0)=[0xff, 0x8001, 0x80, 0x5, 0x9, 0x1, 0xfff, 0x2, 0x37, 0x7], &(0x7f0000000300)=[0x3f, 0x3, 0x9, 0x0, 0x104, 0x3], &(0x7f0000000440)=[0x60, 0x7, 0x400, 0x1, 0x50bb, 0x7, 0x6, 0x3, 0x4, 0x8000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x8, 0x81, 0xf, 0x0, 0x0}) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x1, 0x7fff, 0x3}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) 04:10:37 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0xe8, &(0x7f00000000c0)="58f8f99c47bdd6e6dc95507c4f97e4c0d05288f8cb0b92ba76944e76071c709c9203082f3471a074462898e202c1e0441014c8bd651386760afc95db2096fd8cae2c682f8010e37f79e005e3f5945dc05ecd0dd4b4c6648a3f1511829c262ecfb8b8d75d5e02d7f609a3018eb5168143078dc73eba8a29e4d13117a3a6f66edaa34af170ff162447387e0d1df438ff6ac4019714dd969b139ddba4d86ca64c2f2e793bb02672e96da4f9bcbbc557d9f2926b10ca1cfe4a75fe75728a7ab7469ae6fdb792d8fb76310e192f0554765b211298571c93ef677b05113654c1e0f38dd23460e77bf63963"}) socketpair(0xb, 0x800, 0x7, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000240)=0x1, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000280)=0x1, 0x4) socket$bt_hidp(0x1f, 0x3, 0x6) accept4(r1, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x80000) 04:10:37 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x6) 04:10:37 executing program 2: r0 = socket(0x105b354d4e53a1fd, 0x1, 0x8) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010142, 0x0, 0x0) 04:10:37 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:10:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x6, 0x900) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000080)=0x1) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x3) 04:10:37 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x6c0a}}, 0x10) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xffff, 0x40000) 04:10:37 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x10001, 0x8040) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) 04:10:37 executing program 1: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000240)={0xa4ac, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x5, 0xc, 0x7f, 0xc1, 0x81, 0x1, "6770bfdb"}, 0x1, 0x1, @userptr=0x5, 0x6}) r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x40, 0x10500) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1b, 0x401, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r6 = perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x6, 0xff, 0x0, 0xcf, 0x0, 0x800000000000009, 0x4000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x7ff}, 0x3ac0, 0x7, 0xffff, 0x6, 0xc56, 0x40, 0x1980}, 0x0, 0x10, 0xffffffffffffffff, 0xe) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:38 executing program 0: r0 = socket(0x22, 0x5, 0x0) socketpair(0x3, 0x1, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x44041}, 0x80000) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x5, 0x3, 0xb1d) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x8, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x24) 04:10:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000180)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in=@broadcast}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) 04:10:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000001, 0x42) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000000c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r2, 0x30, 0x1, @in={0x2, 0x4e23, @loopback}}}, 0xa0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:38 executing program 5: recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x1, &(0x7f0000000140)=""/189, 0xbd}, 0x40000000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000001540)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r0, &(0x7f00000018c0)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/77, 0x4d}, {&(0x7f0000001340)=""/132, 0x84}, {&(0x7f0000001400)=""/30, 0x1e}, {&(0x7f0000001440)=""/234, 0xea}, {&(0x7f0000001540)=""/58, 0x3a}, {&(0x7f0000001580)=""/218, 0xda}, {&(0x7f0000001680)=""/242, 0xf2}, {&(0x7f0000001780)=""/15, 0xf}], 0x9, &(0x7f0000001880)=""/52, 0x34}, 0x40) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffbffffb, 0x2c143) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:38 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 2: r0 = socket(0x2b, 0x1, 0x5) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r6, 0x8}}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r7, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r8, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2004000000c32e85497f18e5eb494037d0710bb80c0000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x7b, &(0x7f0000000340)=""/123, 0x40f00, 0x12, [], r8, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xc, 0x3, 0x1}, 0x10, 0xffffffffffffffff}, 0x78) 04:10:38 executing program 0: r0 = socket(0x10, 0x80000, 0x400) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 04:10:38 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r2, &(0x7f0000001540)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@rc, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/237, 0xed}], 0x1}, 0x100) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x80001) r8 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r8, 0xc00464b4, &(0x7f0000000040)={r10}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r7, 0xc00464b4, &(0x7f00000000c0)={r10}) 04:10:38 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x5, 0x800) syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x163, 0x2) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6, 0x24000) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x1f, 0x442000) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f0000000140)) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) 04:10:38 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xbe, 0x81, 0x20, 0xd4, 0x0, 0xfffffffffffff801, 0xe1cc0, 0x89c3da4468df9885, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x4012, 0xc1, 0x8001, 0x6, 0xfffffffffffffe18, 0x9787, 0x2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:38 executing program 3: r0 = socket(0xa, 0x1, 0x0) recvmsg$can_raw(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:39 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f00000000c0)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x7, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1c, 0x2a4c80) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x14) 04:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = socket(0x26, 0x5, 0x0) accept4$x25(r1, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdb, &(0x7f00000001c0)="be134282a3c431b2c4009a15b137be7e15e3694be621c24f3d02e35cf1aad50c4daf9834e2150c4592cb9b582b1f1d629d0669b152b4b89b9e345c8fe301831f10a7467be3fb5ca8f421290b69ed5f1a7f313620370f35591290623a1e76ccb092319b3549fdff6af215d86cad811b2f68650d64f86878ad00c9dfeb10361240bfc89f25b11ecd87bf304f96d87d219eed1952ede98cddfe1b6ced7dbe5574b6b83f1c84cab4aacfe8da61d61b54e1cf958501af7ababb7b10b96cdb88fd37a66b7c04ea3aa0c952fc0d1a22b7f081304cd1cd9e3b36ab50567176", 0x2, 0xff, 0x0, 0x0, 0x40, 0x0, 0x101, 'syz1\x00'}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x7aa, 0x6, 0x8000}) 04:10:39 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000100)=[0x3, 0x2], 0x2) sendto$rxrpc(r0, &(0x7f0000000000)="5e277b7fdaf8f959980455cd82b76a37a5bb137611e1b8caaf1f2d70f4c0b926e1f2d6a0a722a00694a243029f247b71839bcdd8b80c9930ce2e1964414dc9a9241c4d1bdade4cb822cd5ecb0e3fae0009441ac2abd91db43183f0c9d298f7cf33bb2207598ffaeba9e81804286e4e51f9bd8593de6c7f93e32c20c8b61001a68e7f75b54ce2bec7a389066180774d69e2c506092e5d4588468c860f9098f8", 0x9f, 0xda331fdd2d90eee7, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r4}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r4, 0x2}}, 0x18) 04:10:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6}) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000100)=""/108) r2 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7ff, 0x80) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xffffffffffffffff, 0x8d02) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:39 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x2, {0x1, 0x8000, "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", 0xff, 0x5, 0x2d, 0x20, 0x6, 0x1f, 0x9}, r2}}, 0x128) 04:10:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) 04:10:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x7, 0x0, 0x0}) r4 = socket(0x26, 0x5, 0x0) accept4$x25(r4, 0x0, 0x0, 0x0) getpeername$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x5, 0x100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r5, 0xdfe1, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @ib={0x1b, 0x8, 0xff, {"a74f1fc711d7c28a854c3b4a652bd53c"}, 0x4, 0x1, 0xff}}}, 0x118) 04:10:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000540)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x2e}}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x6, 0x483) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), 0xffffffffffffffff, 0x1}}, 0x18) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000000c0)) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0xb9d5) 04:10:39 executing program 0: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) r0 = socket(0x25, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) recvfrom$rxrpc(r1, 0x0, 0xfffffffffffffe06, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r2, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/6, 0x6, 0x40002101, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, 0x24) 04:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x20400) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) 04:10:39 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@buf={0x5d, &(0x7f0000000000)="cc047a3eded369b9c35151b281aaa4ef84fc0d64d4a3dc26fe73cb8646839ab62c100803f541e2859a6ad1fe794a15317b4b406d5220915b7efed4c6b8e73c915804f729abdfd2d095f0958d20cc95f68ca1dc3b7635bda4b507249972"}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x0, @ipx={0x4, 0x5, 0x100, "adfe70f09c9a", 0x7}, @l2={0x1f, 0x81, @any, 0x5e, 0x2}, @hci={0x1f, 0x2, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1}) 04:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x9, 0x1, 0xffffffff}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:39 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r1, 0x0, 0x0) read$fb(r1, &(0x7f0000000380)=""/143, 0x8f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x7, 0x400200) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000200)) r4 = syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000600)={0x0, 0x3, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66e82426"}, 0x0, 0x0, @userptr}) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0xc, 0x5, 0xbf}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) [ 3603.277631] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:39 executing program 2: ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3, 0x0, 0x5, 0x4000, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x8, 0x5, 0x7fffffff, 0x4800, r0}) write$fb(0xffffffffffffffff, &(0x7f0000000140)="587fd62e75ed7753014ecf789f2ec36b00d2e981", 0x14) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) socketpair(0x9, 0x800, 0x10001, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00', r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) getsockname(r1, &(0x7f00000000c0)=@generic, &(0x7f0000000080)=0x80) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) 04:10:39 executing program 0: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x3, 0x4, 0x101, 0x0, 'syz0\x00', 0x3}) r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000080)=""/124) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, 0x0) 04:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0xa, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:39 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) [ 3603.375957] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:39 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0xffffffffffffff84, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xff) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000100)={r3}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x6, 0x7, 0x12c, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000001c0)={r5}) [ 3603.496209] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:40 executing program 0: socket(0x25, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00e5b0", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf250900000005002a0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004041}, 0x20000850) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000140)=0xfffffcf1) 04:10:40 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 04:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1000, 0x4100) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r8 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000400)=0x9) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) 04:10:40 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x3}) 04:10:40 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x72) socket(0x2b, 0x1, 0x0) socketpair(0x1a, 0x4, 0x200, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000040)=0xfda6) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000200)={0x5, 0x10000}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:40 executing program 0: ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000000)={@host}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x401, 0x0) write$fb(r0, &(0x7f00000000c0)="c4a20ff025cb47559d265cd5e33a0fd128bd7b5e5cf9270628ffeae84368cd040d851ac0beb41d65da577eeee3771e9de1d4ebf3e0759b49849c151afcfa292f966033b1b41670be5bf182516a339fd444d16937e29a2e16ba85e2bafe410dd6be8997f8151544b766beb2b2288e51643d8f82a2dec1d977408fa173c89e51016b5b65ea92cbec0b0bb74c087be4fcc8df333bdec42aaa315e78ba148473f19927bffe1a394aff082fe1", 0xaa) r1 = socket(0x0, 0x5, 0x4) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000180)={0x3, 0x3f, 0x100000a}) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x10001, 0x113180) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x8, 0x9, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000001c0)={r6}) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) [ 3604.155122] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:40 executing program 2: ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000480)={@remote={[], 0x2}, 0x2, 'veth1_to_team\x00'}) r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x4300) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7fff, 0x7, "5184d8b89d9d8ddde5c24fe6acfc76cd1df30cd03d14c0de15f047584a7056637fc51744c6692530d03cf39a31fadd84536cea42b72a2c8c69310a79288158c06be201a9078fc968138be8e8843d893c987a671048d1246be90226aa00450e5950cf25c60ae5a021d6ecc3f15eed2bbf59d9124251e622a0f54b11845062a0680a93dce32cdf146c22436b3bd1524de0634ed0616561b97df40c88c2db41fa77fac2019461a3345832ea11827b5fd2c645b5d2fde2d2e9514020e96abd58a5500f07f9ed7bf36a0ce547091747dc183571496bbe4c93061e9706491813c419edc29e4a2782a2cb8f48e594d7f8ed731690ff17dedb87a99b79d1c80a55175afc", 0x5, 0x20, 0x0, 0xf8, 0x9, 0x7, 0x40}}}, 0x120) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0x400, 0x10005, 0x1}) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000400)='/dev/snd/controlC#\x00', 0x40, 0x100000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000440)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, 0x0) socketpair(0x15, 0x6, 0x1, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$rxrpc(r4, &(0x7f0000001800)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @private0, 0x3}}, 0x24) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000002c0)={0xa5, 0x2800000}) [ 3604.263786] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:40 executing program 0: r0 = socket(0x21, 0x800, 0x1) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:40 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) sendto$rxrpc(r5, &(0x7f00000001c0)="9e0a440a8c35fe8b3bba629322aa106aaf0d4e820b24b72ca91df46915359b3a1de21e34807798d2e5cad771adcda7ff524c22147642dc2148bacb2e76f13a750386c41fcece951e9baf700523b91ca01942c3bd46e5cfefb5b622095f9a8b99f40265823691602c805a0e5d1084e056aec8b0155010670971b1ee402e001e1cd2d94ea8b44b00ed58fac998036ec3ab46efc661708a2ad76d3b7f7ab97541f3c2a802132aa3cb8a27cb5bb38e9b925d9ab98da035d15716845a66c2e392429453e133288beaad19c5fc1b11df6b0b6c908303a0b54d31b0bd578316b0cecf06c0c6198b6a4cdfe703c7ed374cfa5dc07c", 0xf1, 0x2, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @remote, 0x913d}}, 0x24) 04:10:40 executing program 2: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @hci={0x1f, 0xffffffffffffffff}, @tipc=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc56, 0x4e}) r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x9, 0x2, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x1) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1b381fad", @ANYRES16=r3, @ANYBLOB="8dbf2dbd7000ffdbdf2510000000080031000000000208003b00040000000800310002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008845}, 0x180) 04:10:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r7}) 04:10:40 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x4) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:40 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:40 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f0000000040)={r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f00000000c0)={r7}) 04:10:40 executing program 2: r0 = socket(0x8, 0x5, 0x24d6) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:40 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1ff, 0x12000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x40, 0xa1b4, 0xa438}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) 04:10:40 executing program 5: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:40 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0)='batadv\x00', r0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000016c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f00000017c0)=0xe8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000018c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="100025bd7000ffdbdf250300000008003200ffff000008003a00f30f000008000600", @ANYRES32=r2, @ANYBLOB="08003a000800000005002900010000000a0009000180c2000002000008003b00090000000500370001000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8000) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r3, &(0x7f0000001540)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001440)=[{0x0}, {0x0}], 0x2}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000001540)={&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/174, 0xae}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/69, 0x45}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/131, 0x83}], 0x8}, 0x10000) 04:10:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1ff, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000200)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:40 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000001c0)=0x78) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r3}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0xff, 0x2, 0x1, 0x7f, 0x2, "ceae04ece7e63711757ccf1139875217cd0c0664f68d26a50d1338cd9b65c0a30b1eeb845edeb8f7ff1133901d48332794a71aac1b5462f411c893abb0ba32e896a46e500df73b9eda823a0265786cdf746efba08a05052069d11500ec1e4a773711517c03dc5b598f55abc166a932cf975bf7b43bbf6f3dcf03bb99e60840e4"}) 04:10:40 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000013c0)={{{@in=@multicast1, @in6=@dev}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000014c0)=0xe8) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) 04:10:40 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:40 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @remote, 0x7}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@buf={0x52, &(0x7f0000000140)="11af80f67bae0d8ddf626d777da18dcfd7424dd0f1e16f263b2e0efe2be4bd9868086de3a23599cf53b9232fb35633f7b340d6e9b4599233ef71d1fa98d28f7f4dd1d8caf792a08ab74859e555d43b2fcd59"}) bind$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffa, @mcast2, 0xc3}}, 0x24) 04:10:41 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 04:10:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0x80045530, &(0x7f00000001c0)=""/158) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x8, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r5}) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) clock_getres(0x5, &(0x7f0000000240)) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r7, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r8, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e86686ba7ea7e888480929e55"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x762ec98a119f2bb1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r9}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:10:41 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:41 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000080)={r1, r0, 0x2, 0x52, &(0x7f0000000000)="a86e183a0ac0e15090ea7da1fb368c41005644e3f73180f7e41e958e84029a4f2e70469939564e8c9fe560a6afe728797e6d26029e2401195cdd751e4fbb95e84e8663c70d5693354c01af1be53f19a341df", 0x8, 0x6, 0x7, 0x1000, 0x2, 0x2, 0xd3f, 'syz1\x00'}) 04:10:41 executing program 2: r0 = socket(0x5, 0x1, 0xfffffffe) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/136) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)={r3}) 04:10:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000080)={0x5, 0x4, 0x5, 0x8, 'syz1\x00', 0x200}) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000d5030000000800000027ede319"]) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:41 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x25, 0x6, 0x7) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000016c0)={0x4, &(0x7f0000001440)=[{}, {@fixed}, {@none}, {@fixed}]}) 04:10:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8, 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 04:10:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x3, 0x470140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:41 executing program 2: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0d83000004000000ffffff6b64309a5938ce67dfb142c4000000"]) 04:10:41 executing program 0: r0 = socket(0x25, 0x5, 0xffffffff) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 04:10:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) [ 3605.769614] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 04:10:41 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x100000001, 0x102) 04:10:41 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r1}) r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x400000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r3}) 04:10:41 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x7ff, 0x8b01) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x3, 0x3, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xc6d1, 0x1c, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:41 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000ffdbdf250b00000005003300030000000500380000000000080031000100010005002e000100000005006aa80100000005002f0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x44050}, 0x400) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:41 executing program 0: r0 = socket(0x29, 0x800, 0x90) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:41 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:41 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1) 04:10:41 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = accept4$x25(r0, 0x0, &(0x7f0000000000), 0x80800) recvfrom$rxrpc(r0, &(0x7f0000000080)=""/245, 0xf5, 0x2, &(0x7f0000000180)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, 0x24) ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000040)={0x20, 0x3}) 04:10:42 executing program 2: recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 04:10:42 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r6 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x80, 0x111040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r6, 0xc01064b3, &(0x7f0000000100)={r3}) r7 = socket(0x26, 0x5, 0x0) accept4$x25(r7, 0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000140)={@none, 0x5}) 04:10:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x3}) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) 04:10:42 executing program 0: socket(0x25, 0x5, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x5, 0x0, 0x4, 0x0, 0x7f, {}, {0x1, 0x1, 0x3f, 0x1f, 0x20, 0x3, "6df4d7df"}, 0x10001, 0x2, @userptr=0x7, 0x1, 0x0, r1}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000000)='%{@\\\']-\xc5&!{\x00', 0xc) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000001c0)=':\\\x86\x00', 0x4) sendto$rxrpc(r3, &(0x7f0000000040)="c49524b5a4d8a878a89e121c6d2b28c525e7e1b291aa014857c6597130fd71e9060f2e14c416428191791f1442f89afed1f2eca00db65a65599ede3db7a2935d9131b5063523210173f32f873b7727fab5a910b6590906fc641745e4a216dda7d6ee693e78c7ba34b0bc874729cc3526915c721ab6df5151e28cf087cce6545f970c9f", 0x83, 0x4008090, 0x0, 0x0) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:42 executing program 2: r0 = socket(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xd7, 0x20000) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0xf66) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:42 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x18, 0x4, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000200)={r0, r2, 0xda, 0xd0, &(0x7f0000000100)="cc26966fdedf141a34ebb585220c61649e1fb3bb1e4a230a6e27d4ad39d4c69bec746e3b164e67954fda6139db503b842f68f80523f35988910ca71f737320aa3c7b68f60158d74869b8028a54b1dfa26fc97c07dc9b77942bf9bc0e449ad095d592da062cde22fd125258f9ad3998b061b7cf3a8eb44d040bcaa1a8ebc0c0f25edf169fab4be4b5330f669d7907060285b439f784e6ddfd94bdadedd6ec6f4dbdc169c37193f877c1c12276d48e5ff73e5d28a8713561845bc74bac2c37d28ab269ee83e10e4c698e75039563a8d6d2", 0x8, 0x9, 0x1ff, 0x100, 0x3ff, 0x0, 0x9, 'syz1\x00'}) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) 04:10:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x902) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) 04:10:42 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd7000fddbdf2510000000080039000300000008000600", @ANYRES32=r2, @ANYBLOB="b107e7de1d0fbb6cb19ea0d2512232d871c8a30c734a41ca2530a822efda5ea805a6fd628f839c12d8e02a96dcea0fe0fe157f77153eede7c77930597b694fc514f70987a70fbca66740933a61d6d72ed940f255a703d769d7b6737e6ca0c7f10ca3e7858086ba4691179e866c58a7ea7e888480929e55"], 0x24}}, 0x0) 04:10:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x3}) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xd7, 0x20000) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0xf66) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:42 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r0}}, 0xc) r1 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r5, 0xc00464b4, &(0x7f00000000c0)={r2}) 04:10:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000080)='-\x00', 0x2) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x7, 0x14, [0xfffffff7, 0x7fffffff, 0x3, 0x787, 0x18000]}) r1 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r1, 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000a, 0x50, r1, 0xab000) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000000c0)) restart_syscall() r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000, 0x8000) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000080)=0xf7) restart_syscall() ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000180)={0x3f}) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xd7, 0x20000) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r7 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000140)=0xf66) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000000c0)={0x6, 0x8, 0xed, 0x6, 0x4, 0xffffffffffffff21, 0xfffffffffffffffd, 0x212}, &(0x7f0000000100)={0x101, 0x100, 0x2, 0x1, 0x5, 0x4, 0x100000001, 0x4}, &(0x7f0000000140)={0x7f, 0x9d, 0xbdd8, 0x7, 0xffffffffffffffff, 0x20200000000000, 0x2, 0xffff}, &(0x7f00000001c0), &(0x7f0000000240)={&(0x7f0000000200)={[0x401]}, 0x8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x76a7, 0x781041) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x99, 0x1ff, 0xffffffff, "6b6dddad9ff17953f6fc0596b19bc8b6b1b398d2b9ab0439c556383adb6b20bc6d89e5ea000f138d6f90c2a716b3dc212a2eb3ac5e3e75dd92dc09dca32d76d73ca4263db65ddc3c0b8ab8059749f8be63778f2059007074b94229b5760dcc3de57ccf2b15b5dd44f8c48a937c4228f9e295f04cd0a7dd0fea03dc0597e2a938944c51e0319f701e17e49ada661134c4b9cd766d300759e628"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x80000000) sched_getattr(0x0, &(0x7f0000000080)={0x38}, 0x38, 0x0) 04:10:42 executing program 2: r0 = socket(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r3, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x64, r2, 0x100, 0x70bd2c, 0x8001, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x259b14495dc3479b) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x95, 0x1, 0x2f, "23e863bd9a1f0362d7d55b1a6a14eb749462057f0e39437c47e210533fb1d3b5a8b8e94c1e19fa7ad6cca51853c55821368cbd472fa74d2594411e12b1db16c1d77d3fa7b271d5c72e058fbc044b628d8bc6cec895d4743e537225f9f20364fc54a6100337e001113dbb99fd35723eb1c99121d16d517a0d5b9d83622aa792691c7c70d19845b85f035da61a40f83fda8927d5525e"}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r1}) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r8 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000400)=0x9) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) 04:10:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000040)) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000080)={@none, 0x3}) 04:10:42 executing program 0: r0 = socket(0x8, 0x5, 0x2ae) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r1, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f00000005c0)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004164a1342f5d00a327112cfafc3f79f77d9f8f66c217b48bbb3244bba5a13a4fec8630c41f7b30b894415fc7eae7ecfb1a57fbdde6da7583f7bbe538d5f135867b47bf38566a733b0e1098d5217d54db282c9327c6741b1fbc84be521b42d1b8155ddb155955a457b0a8ecd1a1", @ANYRES64=r0, @ANYBLOB="0100000000000000000008000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x284f8562f9dd2e16, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffb}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40001) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r8 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000400)=0x9) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) 04:10:42 executing program 2: sysfs$2(0x2, 0x9d, &(0x7f0000000180)) r0 = socket(0x28, 0x800, 0x7) accept4$x25(r0, 0x0, &(0x7f0000000180), 0x800) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in6=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private0, @in=@remote}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) recvfrom$rxrpc(r0, 0x0, 0x0, 0x62, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x2, 0x1, 0x10001, 0x8000, 'syz0\x00', 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4a000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) r8 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r8, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r8, 0x2201, &(0x7f0000000400)=0x9) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r7}}, 0x18) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1, 0x86, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x0, 0x200, 0x8d1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x3, 0xe621}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) 04:10:42 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x200000) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x800032) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x100002) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000100)=0x100) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000080)) r2 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 2: r0 = socket(0x6, 0x1, 0x9) recvfrom$rxrpc(r0, 0x0, 0x0, 0x40010003, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 04:10:42 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0xe, 0x0, 0xe1, 0x0, 0x6dc, 0x0, 0x11, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x82dedbecbfd64bb5, 0x0, 0x8, 0x0, 0x5, 0x7f, 0xffff}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xa) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000400)=0x9) 04:10:42 executing program 0: r0 = socket(0x25, 0x5, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$rxrpc(r0, &(0x7f0000000000)=""/129, 0x81, 0x1, &(0x7f00000000c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @loopback, 0x6}}, 0x24) 04:10:42 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000000040)) 04:10:42 executing program 0: r0 = socket(0x25, 0x4, 0x3817) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) 04:10:42 executing program 2: r0 = socket(0x2b, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0xfa0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff}}, 0x24) 04:10:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r4, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r3}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000001c0)=0x2, r3, 0x0, 0x0, 0x1}}, 0x20) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x26, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x10001, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r8}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r5}) 04:10:42 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x220003) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x16, 0xc7, 0x0, "ebc32db14ae8843638e9467b45c1b61ed22a5c76e51c"}) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) 04:10:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) 04:10:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x60001) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x53) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r2, &(0x7f0000000080)=@nl=@unspec, &(0x7f0000000100)=0x80, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0x3, 0x2}, 0x6) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) 04:10:43 executing program 2: r0 = socket(0x3, 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) getsockname(r1, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 04:10:43 executing program 0: r0 = socket(0x23, 0x6, 0x3) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:43 executing program 2: r0 = socket(0x22, 0x1, 0x20) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7fd, 0x1a1900) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x32100) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000080)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) 04:10:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0xff80, 0x1000, &(0x7f0000000600)="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", 0x7f, 0x66, 0x1, 0x1f, 0x3, 0x3, 0xce1, 'syz1\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000240)={0xc5f6, 0x5, 0x9}) tkill(0x0, 0x13) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="1d00000000000000000008000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000054b9e5835a6605108dd57d6a99db7fc412191344fd1278329bbafe503aadbdde48617229d515a327bfb34ba1e3e86cab816a9dc62dcf3743373af0087a9bd8aaf367f4849206a9773fb57c6716d4b2ebfae84c55f56b859b76f283b5c81e6cb59d2d76c4414a99b7f5700e08965de3fa275b72b2470c8d9740db1aa06fa105ade960d8300c634c6d7f4f6039965073a83", @ANYRES16, @ANYBLOB="000227bd7000fc2006a2cb358e0982494870ce9a78dbdf250b0000000500"], 0x24}}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r8, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, &(0x7f0000000080)=0xdc) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) 04:10:43 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000005c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f00000005c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x111}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000340)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r5}}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)={0xf0, 0x4, 0x8, "42ef30a34d012e7328deb437a525874626ed2e7d851d2a95a470d425d8882336bdb4fab8c6f5b9f8633ca74fcffd44e32e6060b16a58fae660ec87f8c57ae36f1c80e4f763e76f7f4e744b1787cca70cf8e8d4ddfac14b75606e4af71e6951b61dafa07287799c920792f43feb92030fe480a6fae2fae172d85ef55875ed7359c363a43222834a8d9dd1c9cd23075a9a783856a0bf9394d88fa1a94536e4699c15b0f125c81f3d507423a70b65cc4fd1376653ffdbeb8e5a51253ff62fa61d63eb4bb707f4f7b80f8b20d795f8d8953404f67b8e8e1b5ed155b683eb7e8d4c1a65373de4a123bf8121e9a43ff33d242e"}) r7 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f00000005c0)) 04:10:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0xa}}, 0x20) 04:10:43 executing program 0: r0 = socket(0x25, 0x5, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) getsockname(r1, 0x0, &(0x7f0000000180)) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x7, 0x751200) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) 04:10:43 executing program 2: r0 = socket(0x2b, 0x1, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="f3889f86da565b6536727f2187f1b61b32dc3bd0c18fee26aaa440b778e42a97a231cc0998f3944a02c5e17c06e176112ecb77eaa067b1ed88a44a92ac8feec3d99d44dcee11dc67d89df5d54b936c851fb795d85ad7e1330b14c54be7d02fcecc6176d95d668f1a2f07d4436414c2e2c4ac482f352119afb65f6a0e03fb6adef66f45018c321ae156980212e35e83", 0x8f) 04:10:43 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x8000, 0x1, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000040)={r2}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x7, 0x4, 'syz0\x00', 0x40}, 0x1, [0x76b8, 0x9, 0x1ff, 0x5, 0x7, 0xfffffffffffffffd, 0x7ff, 0x20000000000, 0x400000, 0xd5, 0x8, 0x4, 0x0, 0x81, 0x93, 0x5, 0x10001, 0x81, 0x1f, 0x2, 0x1000, 0x8, 0x2, 0x0, 0x4, 0x80, 0x1f, 0x2, 0x81, 0x9, 0x3ff, 0x101, 0x0, 0xffffffff, 0x6, 0xfffffffffffffff3, 0x3, 0x3, 0x2f, 0x4, 0x9, 0x4, 0x1f, 0x3, 0x4, 0x9, 0x8, 0x20, 0xfffffffffffffffa, 0xffffffffffffff6c, 0x3, 0x7, 0x8, 0x2, 0x3f, 0x9, 0x8dd, 0x8, 0x1ff, 0x5, 0x401, 0x7, 0x1ff, 0x9, 0xfffffffffffffffa, 0x10000, 0x0, 0x7f, 0xb39, 0xa8f, 0x70, 0x6, 0x1, 0x2, 0x1, 0x4, 0x3, 0x1ff, 0x6, 0x400, 0x100, 0x5, 0x8, 0x8, 0x1f, 0x9, 0xfffffffffffffffb, 0xffffffffffffff81, 0x400, 0x7, 0x0, 0x7, 0x5c21, 0xa0, 0x6, 0x2, 0x140000000000, 0x26f, 0x8000, 0x9, 0x3, 0x8, 0xa26, 0x3ff, 0x5, 0x7, 0x6, 0x3ff, 0x80000000, 0x7, 0x0, 0x1, 0x80, 0x1fffc0000000, 0x1265, 0x2, 0x91, 0x8, 0x0, 0x6, 0x7, 0x1, 0x1, 0x80000000, 0x0, 0x8, 0x2, 0x5ea6]}) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x9, 0xde7d}, 0x20, 0x1, 0x40, 0x6, 0x9, 0x8001, 0x8}, 0x0, 0xa, 0xffffffffffffffff, 0xb) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r5) 04:10:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, r6, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) 04:10:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1f, 0x400) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) [ 3607.306750] ================================================================== [ 3607.314535] BUG: KASAN: use-after-free in vgem_gem_dumb_create+0x200/0x210 [ 3607.321557] Read of size 8 at addr ffff8880a4a491c0 by task syz-executor.1/4453 [ 3607.329129] [ 3607.330760] CPU: 1 PID: 4453 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 3607.338551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3607.347902] Call Trace: [ 3607.350499] dump_stack+0x1b2/0x281 [ 3607.354167] print_address_description.cold+0x54/0x1d3 [ 3607.359449] kasan_report_error.cold+0x8a/0x191 [ 3607.364121] ? vgem_gem_dumb_create+0x200/0x210 [ 3607.368783] __asan_report_load8_noabort+0x68/0x70 [ 3607.373696] ? vgem_gem_dumb_create+0x200/0x210 [ 3607.378344] vgem_gem_dumb_create+0x200/0x210 [ 3607.382866] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 3607.387861] ? __drm_printfn_debug+0x70/0x70 [ 3607.392249] drm_ioctl_kernel+0x14c/0x200 [ 3607.396376] drm_ioctl+0x419/0x870 [ 3607.399896] ? __drm_printfn_debug+0x70/0x70 [ 3607.404301] ? drm_getstats+0x20/0x20 [ 3607.408094] ? futex_exit_release+0x220/0x220 [ 3607.412577] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3607.417685] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3607.422686] ? drm_getstats+0x20/0x20 [ 3607.426486] do_vfs_ioctl+0x75a/0xff0 [ 3607.430269] ? ioctl_preallocate+0x1a0/0x1a0 [ 3607.434654] ? lock_downgrade+0x740/0x740 [ 3607.438798] ? __fget+0x225/0x360 [ 3607.442245] ? do_vfs_ioctl+0xff0/0xff0 [ 3607.446199] ? security_file_ioctl+0x83/0xb0 [ 3607.450585] SyS_ioctl+0x7f/0xb0 [ 3607.453929] ? do_vfs_ioctl+0xff0/0xff0 [ 3607.457992] do_syscall_64+0x1d5/0x640 [ 3607.461864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3607.467117] RIP: 0033:0x465f69 [ 3607.470284] RSP: 002b:00007f9146f2f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3607.477968] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3607.485333] RDX: 0000000020000180 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 3607.492594] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3607.499843] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3607.507105] R13: 00007ffdbe81880f R14: 00007f9146f2f300 R15: 0000000000022000 [ 3607.514379] [ 3607.515983] Allocated by task 4453: [ 3607.519609] kasan_kmalloc+0xeb/0x160 [ 3607.523387] kmem_cache_alloc_trace+0x131/0x3d0 [ 3607.528034] __vgem_gem_create+0x44/0xe0 [ 3607.532070] vgem_gem_dumb_create+0xc5/0x210 [ 3607.536454] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 3607.541450] drm_ioctl_kernel+0x14c/0x200 [ 3607.545727] drm_ioctl+0x419/0x870 [ 3607.549254] do_vfs_ioctl+0x75a/0xff0 [ 3607.553038] SyS_ioctl+0x7f/0xb0 [ 3607.556393] do_syscall_64+0x1d5/0x640 [ 3607.560261] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3607.565425] [ 3607.567031] Freed by task 4453: [ 3607.570318] kasan_slab_free+0xc3/0x1a0 [ 3607.574269] kfree+0xc9/0x250 [ 3607.577370] drm_gem_object_free+0x8f/0x150 [ 3607.581670] drm_gem_object_put_unlocked+0xc3/0x160 [ 3607.586664] vgem_gem_dumb_create+0xf2/0x210 [ 3607.591051] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 3607.596054] drm_ioctl_kernel+0x14c/0x200 [ 3607.600190] drm_ioctl+0x419/0x870 [ 3607.603720] do_vfs_ioctl+0x75a/0xff0 [ 3607.607497] SyS_ioctl+0x7f/0xb0 [ 3607.610841] do_syscall_64+0x1d5/0x640 [ 3607.614709] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3607.619885] [ 3607.621492] The buggy address belongs to the object at ffff8880a4a490c0 [ 3607.621492] which belongs to the cache kmalloc-512 of size 512 [ 3607.634143] The buggy address is located 256 bytes inside of [ 3607.634143] 512-byte region [ffff8880a4a490c0, ffff8880a4a492c0) [ 3607.645993] The buggy address belongs to the page: [ 3607.650907] page:ffffea0002929240 count:1 mapcount:0 mapping:ffff8880a4a490c0 index:0xffff8880a4a49840 [ 3607.660338] flags: 0xfff00000000100(slab) [ 3607.664464] raw: 00fff00000000100 ffff8880a4a490c0 ffff8880a4a49840 0000000100000005 [ 3607.672320] raw: ffffea000284fba0 ffffea0002cab220 ffff88813fe80940 0000000000000000 [ 3607.680176] page dumped because: kasan: bad access detected [ 3607.685859] [ 3607.687479] Memory state around the buggy address: [ 3607.692386] ffff8880a4a49080: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 3607.699739] ffff8880a4a49100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb 04:10:43 executing program 0: r0 = socket(0x25, 0x6, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:10:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000380)={0x40, 0x3, &(0x7f0000000440)=[0x8, 0x6, 0x1], &(0x7f00000002c0)=[0x1a21, 0xfff, 0xffff, 0x6, 0x3, 0x81, 0xbc8f, 0x10, 0x4, 0x100], &(0x7f0000000300), &(0x7f0000000340)=[0x8, 0x6, 0xb, 0xf90c, 0xfff, 0x3]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xc6d6, 0x1f, 0x6, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f00000005c0)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x3f, 0x3ff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)={r2}) syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xc6d6, 0x1f, 0x89, 0x0, 0x0}) write$fb(r1, &(0x7f0000000740)="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", 0x1000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r5}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000600)={{0x9, 0x5, 0x2, 0x2, '\x00', 0x1ff}, 0x0, 0x10, 0x0, 0x0, 0xa, 0x1, 'syz0\x00', &(0x7f00000003c0)=['\x00', '/dev/fb0\x00', '#(^[[4\x00', '}\x00', '\x00', '\x00', '/dev/fb0\x00', '/dev/dri/card#\x00', '/dev/fb0\x00', '/dev/fb0\x00'], 0x3f, [], [0x7, 0x3, 0x1000, 0x8001]}) 04:10:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x102) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x34) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 04:10:43 executing program 2: r0 = socket(0x2b, 0x1, 0x1fd) accept4(0xffffffffffffffff, &(0x7f0000000080)=@nl=@proc, &(0x7f0000000100)=0x80, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000140)={0x3f}, 0x1) r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = accept4(r1, &(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x80, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000300)=':\\\x86\x00', 0x4) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000480)=':\\\x86\x00', 0x4) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb0\x00', 0x0, 0x0) write$fb(r3, 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000340)={0x13, 0x2}) sendto$rxrpc(r1, &(0x7f0000000180)="fb1280a3d0a775895f890ea09b4478731b69e17d55ff96db989c96be74fe10b2588a7c70c2ca881c22037bae261343ace6b8e782c8dd146fb7790cf897bf2c62330e35b82d926dc1610d231b94ad6f0500f82947e2bb65d3238e57f22a20f5d6ad5dc1e2ad5d02d420090e1792f9aa41437b3ca0da537ae3cc0ea4d775c9b50c0ea18d7b19", 0x85, 0x20008000, 0x0, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010101}}, 0x24) [ 3607.707075] >ffff8880a4a49180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3607.714411] ^ [ 3607.719844] ffff8880a4a49200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3607.727180] ffff8880a4a49280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 3607.734512] ================================================================== [ 3607.741845] Disabling lock debugging due to kernel taint [ 3607.810512] Kernel panic - not syncing: panic_on_warn set ... [ 3607.810512] [ 3607.817909] CPU: 1 PID: 4453 Comm: syz-executor.1 Tainted: G B 4.14.225-syzkaller #0 [ 3607.826914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3607.836263] Call Trace: [ 3607.838853] dump_stack+0x1b2/0x281 [ 3607.842483] panic+0x1f9/0x42d [ 3607.845675] ? add_taint.cold+0x16/0x16 [ 3607.851301] ? ___preempt_schedule+0x16/0x18 [ 3607.855718] kasan_end_report+0x43/0x49 [ 3607.859695] kasan_report_error.cold+0xa7/0x191 [ 3607.864384] ? vgem_gem_dumb_create+0x200/0x210 [ 3607.869069] __asan_report_load8_noabort+0x68/0x70 [ 3607.873997] ? vgem_gem_dumb_create+0x200/0x210 [ 3607.878665] vgem_gem_dumb_create+0x200/0x210 [ 3607.883164] drm_mode_create_dumb_ioctl+0x221/0x2b0 [ 3607.888178] ? __drm_printfn_debug+0x70/0x70 [ 3607.892587] drm_ioctl_kernel+0x14c/0x200 [ 3607.896736] drm_ioctl+0x419/0x870 [ 3607.900278] ? __drm_printfn_debug+0x70/0x70 [ 3607.904727] ? drm_getstats+0x20/0x20 [ 3607.908517] ? futex_exit_release+0x220/0x220 [ 3607.912995] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 3607.918083] ? debug_check_no_obj_freed+0x2c0/0x680 [ 3607.923080] ? drm_getstats+0x20/0x20 [ 3607.926873] do_vfs_ioctl+0x75a/0xff0 [ 3607.930655] ? ioctl_preallocate+0x1a0/0x1a0 [ 3607.935043] ? lock_downgrade+0x740/0x740 [ 3607.939170] ? __fget+0x225/0x360 [ 3607.942611] ? do_vfs_ioctl+0xff0/0xff0 [ 3607.946566] ? security_file_ioctl+0x83/0xb0 [ 3607.950952] SyS_ioctl+0x7f/0xb0 [ 3607.954308] ? do_vfs_ioctl+0xff0/0xff0 [ 3607.958258] do_syscall_64+0x1d5/0x640 [ 3607.962129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 3607.967296] RIP: 0033:0x465f69 [ 3607.970461] RSP: 002b:00007f9146f2f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3607.978160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 3607.985406] RDX: 0000000020000180 RSI: 00000000c02064b2 RDI: 0000000000000003 [ 3607.992657] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 3607.999912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3608.007156] R13: 00007ffdbe81880f R14: 00007f9146f2f300 R15: 0000000000022000 [ 3608.015109] Kernel Offset: disabled [ 3608.019956] Rebooting in 86400 seconds..